Master Admin Console
Consumer app sync cone: each shop has an API key — visible in its card once you open Accounts. The Android app pulls GET /api/products?key=<shop key>.
GET /api/products?key=<shop key>
Shown only once. The vendor must change the password at first login.