Prepare configuration and migration

Version changes and rehearse data operations on a protected copy.

• Keep secrets outside source control.
• Use explicit mappings and repeatable scripts.
• Back up before a production change and verify the backup.