First run and stunnel hardening

Minor fixes

• [api] Add audit logging and 2s pause between failed token updates
• [api] Reorder some functions in the core api files
• [api] Harden stunnel.conf by adding ciphers list and disabling renegotiation
• [deps] Update jidoteki-admin dep to v1.24.0

New features

• [api/frontend] Add First Run setup process when first accessing the Admin Dashboard.
  On first run, the API will generate a random passphrase and store it in the
  api.token.setup file. The passphrase uses 4 of 7776 words from the EFF large wordlist,
  thus providing ~51 bits of entropy. This First Run feature is disabled by default and
  must be enabled by adding "first-run":{"word-length":4,"enabled":true} to
  the /usr/local/etc/jidoteki-admin-api.json file.
• [api] When First Run is enabled, error responses now contain a First-Run key and boolean value