feature: use non-admin db account

[ericfitz]

• refactor to use separate tool for migrations, which require db admin/DDL
• use least privilege account for norma operation

[ericfitz]

This is very problematic due to our database migration strategy (built into server code and done by server during startup) using GORM