Keep runtime grant verification aligned with all database migrations so release builds fail before missing table privileges reach deployment.
Enforce mTLS and least-privilege runtime boundaries while adding repeatable MySQL 8.4 and Docker smoke checks that require no production secrets.