fix(platform): apply production hardening from audit plan

Close billing, tenancy, migration, build, and CI/CD gaps identified in the
audit: wallet/gateway guards, full-UUID namespaces, idempotent migrations with
base schema, stateful service stability, safer Dockerfiles/git builds, and
platform chart hardening (Redis auth, RollingUpdate, backups, Swagger off).

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/workflows/ci.yml

@@ -25,6 +25,14 @@ jobs:
       - run: npm run lint:check
       - run: npm test -- --passWithNoTests
       - run: npm run test:e2e
+      - name: Verify Helm migration ConfigMap is in sync
+        run: |
+          npm run sync:migrations
+          if ! git diff --quiet -- helm/cloudhost-platform/migrations; then
+            echo "::error::helm/cloudhost-platform/migrations is out of sync with backend/migrations. Run 'npm run sync:migrations' and commit."
+            git --no-pager diff --stat -- helm/cloudhost-platform/migrations
+            exit 1
+          fi
 
   frontend:
     name: Frontend