deploy: prod-only pipeline with Drizzle migrations; dev refresh + preview

- push to main builds, backs up prod (pg_dump 17), runs db-migrate + seeds,
  preflights and deploys; rollback = workflow_dispatch with rollback_tag
- staging workflow, promote step and migrate-*.ts / old SQL removed
- DB_URL = app role, DB_MIGRATE_URL = owner role
- scripts/db-refresh-dev.sh (prod dump -> local dev DB), scripts/preview.sh <branch>

package.json

@@ -15,23 +15,18 @@
 		"test:unit": "vitest",
 		"db:push": "drizzle-kit push",
 		"db:generate": "drizzle-kit generate",
-		"db:migrate": "drizzle-kit migrate",
+		"db:migrate": "bun scripts/db-migrate.ts",
+		"db:refresh-dev": "bash scripts/db-refresh-dev.sh",
+		"preview:branch": "bash scripts/preview.sh",
 		"db:studio": "drizzle-kit studio",
 		"db:seed": "bun scripts/seed-catalog.ts",
 		"db:seed:cod": "bun scripts/seed-cod-catalog.ts",
-		"db:migrate:auth": "bun scripts/migrate-auth-catalog.ts",
-		"db:migrate:foundation": "bun scripts/migrate-foundation.ts",
-		"db:migrate:money-tracker": "bun scripts/migrate-money-tracker.ts",
-		"db:migrate:game-tracker": "bun scripts/migrate-game-tracker.ts",
-		"db:migrate:cs-prices": "bun scripts/migrate-cs-prices.ts",
 		"cs-prices:ingest": "bun scripts/ingest-cs-prices.ts",
-		"db:migrate:house-tracker": "bun scripts/migrate-house-tracker.ts",
 		"house:worker": "bun scripts/house-worker.ts",
 		"auth:role": "bun scripts/set-admin.ts",
 		"catalog:build": "python3 scripts/build-pokemon-catalog.py",
 		"catalog:cod": "python3 scripts/build-cod-catalog.py && prettier --write data/call-of-duty.json",
 		"test:auth": "node --env-file=.env node_modules/@playwright/test/cli.js test --config playwright.auth.config.ts",
-		"db:migrate:tracker-journal": "bun scripts/migrate-tracker-journal.ts",
 		"catalog:research": "python3 scripts/build-pokemon-research.py",
 		"db:seed:research": "bun scripts/seed-pokemon-research.ts",
 		"db:seed:challenges": "bun scripts/seed-cod-challenges.ts",