Fix local startup defaults and add MVP tests

INSTALL.md

@@ -6,13 +6,14 @@
 
 ## Configure
 ```bash
-cd /root/clawd/mastermind-mvp
+cd /path/to/mastermind-mvp
 cp .env.example .env
 ```
 
 Edit `.env`:
 - `SESSION_SECRET` — set to a long random value
 - `BASE_URL` — the URL you use to reach the app (Tailscale IP recommended)
+- `BOOTSTRAP_OWNER_EMAIL` / `BOOTSTRAP_OWNER_PASSWORD` — defaults are set for local MVP use (`owner@local` / `owner`)
 
 OAuth is optional for now:
 - `GOOGLE_CLIENT_ID/GOOGLE_CLIENT_SECRET`
@@ -25,10 +26,11 @@ docker compose up -d --build
 
 App:
 - http://<BASE_URL_HOST>:3005/login
+- With the default `.env.example`, that is `http://localhost:3005/login`
 
 ## First login (important)
-On first run the app creates:
-- `owner@local` / `owner`
+On first run, if no local identities exist, the app creates:
+- `owner@local` / `owner` by default from `.env.example`
 
 Immediately change it:
 - http://<host>:3005/account/password
@@ -51,3 +53,8 @@ These are the callback URLs the app expects:
 - Microsoft: `BASE_URL/auth/microsoft/callback`
 
 Set `BASE_URL` correctly before authorizing.
+
+## Test
+```bash
+npm test
+```