Secrets and variables kept from before stay with workflows
Migration 0003 gave existing rows the new default, workflows and deployments, which would have handed every workflow secret to deploy builds and apps. They stay workflows-only; new rows still default to both.
No changes
This commit changes no files.