docs: update documentation to OKF v0.1 format

docs/guides/bootstrap.md

@@ -3,7 +3,7 @@ type: guide
 title: First-Run Bootstrap
 description: How a fresh HIPCTF instance is initialized by the very first administrator.
 tags: [guide, bootstrap, first-admin, onboarding, tester]
-timestamp: 2026-07-21T14:43:00Z
+timestamp: 2026-07-21T15:05:00Z
 ---
 
 # When this flow runs
@@ -46,7 +46,7 @@ bypassed.
 
 * On success the modal disappears, the app stores the access token via
   `AuthService.setSession`, calls `BootstrapService.markInitialized()`,
-  and navigates to `/challenges`.
+  and navigates to `/admin` (see [Admin Shell & User Management](/guides/admin-shell.md)).
 * On `USERNAME_TAKEN` the form shows a red alert:
   `"Username already exists"`. The **Retry** button is intentionally
   hidden because the username must be changed first.
@@ -84,7 +84,7 @@ The modal **cannot** be dismissed by the user:
 | 4    | `SetupCreateAdminService.ensureCsrf()`                 | Preflights `GET /api/v1/auth/csrf` so the response sets the `csrf` cookie. |
 | 5    | `POST /api/v1/setup/create-admin`                      | `SetupService.createAdmin` runs in a TypeORM transaction; creates the user with `role='admin'`; mints session via `AuthService.createSession`. |
 | 6    | `setRefreshCookie`                                     | Sets the `rt` HttpOnly cookie.                                          |
-| 7    | Component on success                                   | `AuthService.setSession`, `BootstrapService.markInitialized()`, navigate to `/challenges`. |
+| 7    | Component on success                                   | `AuthService.setSession`, `BootstrapService.markInitialized()`, navigate to `/admin`. |
 | 8    | Subsequent `authGuard` checks                          | `initialized === true`; require auth instead.                          |
 
 # What the operator sees after init
@@ -94,8 +94,10 @@ Once the first admin exists, `/api/v1/bootstrap` returns
 
 * Skips `/bootstrap` entirely.
 * Routes unauthenticated users to `/login`.
-* Routes authenticated users to `/` (Home) which itself redirects to
-  `/challenges` once admin features are wired.
+* Routes authenticated admins to `/` (the Home shell) and renders the
+  admin nav link. The first admin lands directly on the user list at
+  `/admin` (see [Admin Shell & User Management](/guides/admin-shell.md)).
+* Routes authenticated players to `/` without the admin nav link.
 
 # See also