feat: refactor&secure coder-init-admin

running a `terraform apply` as root every time is not great, we should probably move this to a service account.
it would also be worth cleaning it up a little bit and extracting the service script from configuration.nix into a file