Fully Hands-Off (need an API token programatically)

I’m 99% to my goal of being able to stand up a CE environment in docker hands-free. Figured out how to set the root password via the console, and how to load projects from another repo via the API.

This must be 100% no touch, no UI interaction, to get things up and running.

My final (and seemingly insurmountable) hurdle is - I need to obtain and API Access Token from the console.

The sparse information I’ve found references deprecated HTML hacks and SQL inserts of an unencrypted token directly. This all seems shady.

Surely there must be a way to get an API Token using the ruby console, or assign one at startup using a secret OMNIBUS_CONFIG parameter?