Defence In Depth

ADMIN_HASH Interpolated Into mysql -e: Hex-Encoding the Seed Insert

A container setup script seeds the first administrator account by splicing the shell variable `$ADMIN_HASH` into a quoted SQL literal passed to `mysql -e`. The fix hex-encodes the value with `xxd -p` and decodes it inside MySQL with `unhex()`. No quote character from the shell can now reach the SQL parser. This is a defence-in-depth hardening, not a demonstrated exploit, but it closes off a channel that could have planted extra administrator rows at install time.