Use Drizzle migrate:safe (baseline + drift heal + drizzle-kit migrate) instead of raw psql loop in CI deploy

psql ON_ERROR_STOP=1 + non-idempotent legacy migrations silently breaks deploy