Which database users do we need for the `db` package?

[davidsparkles]

Proposal:

1. One user for the migrations, who can write all schemas.
2. One user for the subsequent connection pool, who cannot read or write the meta schema.