Function migrate 

pub async fn migrate(
    palette: Palette,
    database: Arc<Database>,
) -> Result<(), CliError>

acme-proxy migrate — applies the embedded migrations and reports what it did.

Idempotent: sqlx tracks each file by version and checksum, so a database already current is a no-op that says so.