Set up the site provisioner

One-time setup. It writes .env with a fresh shared secret and then removes itself.

Server check

Where things are (detected — correct them if needed)

cPanel account (creates the subdomain and the database for each building)

cPanel → Security → Manage API Tokens → Create. It is stored only in .env on this server.

Setup token