Add passwordHash utility module wrapping bcryptjs for secure password hashing, and AdminUser Mongoose model with username (unique, lowercase), passwordHash, role (admin/staff), and active fields.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>