feat: bootstrap SuperAdmin from env and lock one-time seeding

Production creates the SuperAdmin from env credentials, and dashboard seeding is authenticated, SuperAdmin-only, and locked after the first run.

components/seed/seedRoutes.js

@@ -0,0 +1,17 @@
+// /components/seed/seedRoutes.js
+'use strict';
+
+const express = require('express');
+const seedController = require('./seedController');
+const authMiddleware = require('../../middlewares/authMiddleware');
+const requireSuperAdmin = require('../../middlewares/requireSuperAdmin');
+
+const router = express.Router();
+
+router.use(authMiddleware);
+router.use(requireSuperAdmin);
+
+router.get('/status', seedController.getStatus);
+router.post('/', seedController.runSeed);
+
+module.exports = router;