feat(db): add migration lifecycle tooling

[sanohiro]

Summary

• add the D11/Q5a migration CLI lifecycle for SQLite and PostgreSQL: migrate, status, check, and repair
• enforce exact catalog screening, history reconciliation, dirty-state handling, operation locking, native schema validation, and fail-closed recovery
• add SQLite and PostgreSQL owner coverage, required PostgreSQL CI, scaling measurements, and synchronized English/Japanese contract updates

This is intentionally one larger capability boundary: the catalog policy, native locking, history codec, execution state machine, and CLI are a strict producer-to-consumer chain. Splitting them would leave dormant seams and duplicate the same ownership, failure-recovery, and cross-driver proof.

Verification

• scripts/cargo.sh test -p align_driver --test pkg_db_q5a -- --nocapture
• scripts/pre-pr.sh --base origin/main --reviewer codex-review --review-log .git/align-review-q5a-8a66fbf2.log --findings-fixed --owner-test pkg_db_q5a -- scripts/cargo.sh test -p align_driver --test pkg_db_q5a -- --nocapture
• required PostgreSQL Q5a job added to CI; local PostgreSQL owner skipped because ALIGN_DB_POSTGRES_URL is not set

Review

The pre-open full-diff review found two correctness issues: SQLite token-free trailing bytes were rejected, and unchanged Forbidden history was rewritten destructively. The fix ignores token-free tails, updates unchanged Applying rows in place for both adapters, restores only changed/missing snapshots, and rejects SQLite inbound foreign keys before a restore can cascade.