qa iteration 2

docs/code-of-conduct/CODE_OF_CONDUCT.md

@@ -91,6 +91,7 @@ These checklists are mandatory. Pick the relevant checklist(s) and satisfy them.
 - [ ] Indexing considered for new query patterns.
 - [ ] Serialization round-trip tests updated/added.
 - [ ] Roll-forward behavior documented; rollback constraints noted.
+- [ ] **Startup auto-migration wired** (CRITICAL): Every service that owns a PostgreSQL schema MUST run its migrations automatically on startup via `AddStartupMigrations` (from `StellaOps.Infrastructure.Postgres.Migrations`) or an equivalent `IHostedService`. Relying on external init scripts or manual `psql` execution is forbidden for service-owned schemas. This ensures fresh installs, volume resets, and CI environments always converge to the correct schema without manual intervention. Pattern: `services.AddStartupMigrations(schemaName, moduleName, migrationsAssembly)`. SQL migrations must be embedded resources in the persistence library.
 
 ### 4.5 Security-sensitive change
 - [ ] Threat note added in sprint "Decisions & Risks" (what can go wrong + mitigation).