Create a team (provisions its own hub) and mint a join link. Paste your admin token once. Self-serve signups land here as pending - click approve to provision. The public signup page is at /signup.