ci: enforce production-safe database migrations

apps/api/cmd/migrate/main.go

@@ -24,6 +24,10 @@ func main() {
 		os.Exit(1)
 	}
 	defer conn.Close(ctx)
+	if _, err := conn.Exec(ctx, "SET standard_conforming_strings = on"); err != nil {
+		logger.Error("enforce standard SQL string semantics failed", "error", err)
+		os.Exit(1)
+	}
 
 	if _, err := conn.Exec(ctx, `
 CREATE TABLE IF NOT EXISTS schema_migrations (
@@ -64,6 +68,14 @@ CREATE TABLE IF NOT EXISTS schema_migrations (
 			logger.Error("begin migration failed", "version", version, "error", err)
 			os.Exit(1)
 		}
+		// Pin string parsing semantics inside every migration transaction. A
+		// previous migration may have changed the session GUC, while each file is
+		// parsed and executed independently.
+		if _, err := tx.Exec(ctx, "SET LOCAL standard_conforming_strings = on"); err != nil {
+			_ = tx.Rollback(ctx)
+			logger.Error("enforce migration SQL string semantics failed", "version", version, "error", err)
+			os.Exit(1)
+		}
 		if _, err := tx.Exec(ctx, string(sqlBytes)); err != nil {
 			_ = tx.Rollback(ctx)
 			logger.Error("execute migration failed", "version", version, "error", err)