break db compatibility
We need to break db compatibility for freezing unauthenticated media, the server signing keys rewrite, and persisting backoff state to disk. This MR sets up the infrastructure for maintaining an incompatible db schema and adds a no-op migration that has no effect other than breaking compatibility with conduit.