refactor: add migration, seed permissions, update permissions API

feat(notes): add XLSX import island and admin route

feat(upload): add drag‑and‑drop upload, template download, UI tweaks

compose.test.yml

@@ -7,9 +7,6 @@ services:
       POSTGRES_USER: postgres
       POSTGRES_DB: polympr_test
     volumes:
-      # Init script strips drizzle-kit markers and applies migrations on first start
-      - ./databases/docker-init.sh:/docker-entrypoint-initdb.d/01-migrate.sh:ro
-      - ./databases/migrations:/migrations:ro
       - db_data_test:/var/lib/postgresql/data
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U postgres"]
@@ -17,6 +14,23 @@ services:
       timeout: 5s
       retries: 10
 
+  migrate:
+    image: node:alpine
+    working_dir: /app
+    restart: "no"
+    volumes:
+      - .:/app
+    command: node_modules/.bin/drizzle-kit migrate
+    environment:
+      POSTGRES_HOST: db
+      POSTGRES_PORT: "5432"
+      POSTGRES_USER: postgres
+      POSTGRES_PASS: testpass
+      POSTGRES_DB: polympr_test
+    depends_on:
+      db:
+        condition: service_healthy
+
   app:
     image: denoland/deno:alpine
     working_dir: /app
@@ -34,8 +48,8 @@ services:
       POSTGRES_DB: polympr_test
       LOCAL: "true"
     depends_on:
-      db:
-        condition: service_healthy
+      migrate:
+        condition: service_completed_successfully
 
 volumes:
   db_data_test: