Catch risky migrations before production

Every migration, run before it ships.

• Runs each new migration on a throwaway PostgreSQL 14–17, seeded with rows
• Reports the locks it actually took and the tables it rewrote
• Answers on the pull request as a GitHub check, before anyone merges