Reads an admin-supplied .ini once before settings.json exists; coerces values onto typed Settings via serde; drops secret-looking keys.