Epic 3: Proper database migrations

Move from drizzle-kit push on container boot to real versioned migrations with a committed history. Schema changes become reviewable files that get applied deliberately at deploy time, and can't silently reshape the production database on startup.