PC set-up: one line per PC (/setup/<name>.ps1), the admin laptop always let in, and the admin check no longer breaks the script

- the inserted administrator check split the header comment, leaving '} for ... run ONCE' as code: WS and SC
  join.ps1 failed to parse (Windows' parser: Missing opening '(' after keyword 'for'); now after the whole line
- site.admin_ips / admin_keys (laptop 10.6.7.38, fixed in UniFi) go into every PC script's firewall rule and key
  files, and into the Mac join line, so running a set-up again never shuts the laptop out
- scripts verified by Windows' own PowerShell parser on the NA Lighting PC

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

schema.py

@@ -32,6 +32,10 @@ def field(path, type, default=None, help="", screen="", advanced=False, secret=F
 # -- site --
 field("site", "dict", {}, "This location: its name, this Mac, and when changes must wait.", "Site")
 field("site.id", "id", "na", "Short name used for folders and files.", "Site", advanced=True, regex=r"[a-z0-9_-]+")
+field("site.admin_ips", "list", [], "The admin laptop's fixed addresses: let through the Windows PCs' SSH firewall with this Mac.",
+      "Site", advanced=True, apply="none")
+field("site.admin_keys", "list", [], "The admin laptop's public SSH keys: every PC and Mac set up from here takes them too.",
+      "Site", advanced=True, apply="none")
 field("site.name", "str", "", "The location, as people say it.", "Site", example="North Attleboro", apply="none")
 field("site.ingest_name", "str", "NA Ingest", "What this Mac is called in logs, notes and alerts.", "Site", apply="pages")
 field("site.ingest_hostname", "str", "", "This Mac's network name, used in the page address and by the page tools.",