An administrator wants to launch a single-node MinIO server using the official Docker image and expose the S3 API on port 9000 plus the console on port 9001. Which environment variable setting is required to explicitly set the root credentials at startup?