Wraps migrate.py + migrate_virtual.py + build_disc_cache.py + pg_dump→VPS. Vault
(app_secret) excluded so dash credentials survive a refresh. Clean-rebuild for now;
make non-destructive once dash intake is in use (RECORDGOD_PLAN §6).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>