FAIL - GET /setup (fresh) -> 200 (http=0)
FAIL - form rendered
FAIL - POST /setup without CSRF -> 419 (http=0)
FAIL - invalid input -> 422 with messages (http=0)
FAIL - bad DB credentials -> 422 friendly error (http=0)
FAIL - install -> 200 complete page (http=0)
FAIL - admin email echoed
FAIL - marker written
FAIL - .env written with values

WIZARD_pre_FAILED (0 passed, 9 failed)