Function ensure 

pub async fn ensure(
    handle: &DbHandle,
    kind: Kind,
    owner: &str,
    name: &str,
    version: &str,
) -> Result<String, Error>

Ensure the compartment role + schema exist with the expected grants, and return the child’s connection URL.