AI Implementation feature(821): First-Start Create Admin Modal (#2)

tests/backend/csrf-client.ts

@@ -2,7 +2,11 @@ import request from 'supertest';
 import type { INestApplication } from '@nestjs/common';
 import { CookieAccessInfo } from 'cookiejar';
 
-const csrfSkipPaths = new Set<string>(['/api/v1/auth/login', '/api/v1/auth/register-first-admin']);
+const csrfSkipPaths = new Set<string>([
+  '/api/v1/auth/login',
+  '/api/v1/auth/register-first-admin',
+  '/api/v1/setup/create-admin',
+]);
 
 function attachCsrfHeader(test: request.Test, method: string, path: string, agent: any): request.Test {
   if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(method.toUpperCase())) return test;