Enforce Append Only Migrations Ci

Enforce in CI that shipped database migration files are never edited or deleted, and warn on migrations that look destructive