fix(push): preserve applied migration checksum

Signed-off-by: Tom Brow <tomb@block.xyz>
Co-authored-by: Codex <noreply@openai.com>
Ai-assisted: true

Author: brow

crates/buzz-push-gateway/migrations/0002_application_profiles.sql

@@ -15,4 +15,4 @@ ALTER TABLE push_gateway_installations
     DROP CONSTRAINT push_gateway_installations_app_profile_check;
 ALTER TABLE push_gateway_installations
     ADD CONSTRAINT push_gateway_installations_app_profile_check
-    CHECK (app_profile = 'buzz-ios-dogfood');
+    CHECK (app_profile IN ('buzz-ios-dogfood', 'buzz-ios-app-store'));

crates/buzz-push-gateway/migrations/0004_dogfood_only_profile.sql

@@ -0,0 +1,16 @@
+-- The internal MVP now exposes only the dogfood application profile. Retire
+-- dormant App Store authority before narrowing the server-owned registry.
+DELETE FROM push_gateway_delegations
+WHERE installation_id IN (
+    SELECT id FROM push_gateway_installations
+    WHERE app_profile = 'buzz-ios-app-store'
+);
+
+DELETE FROM push_gateway_installations
+WHERE app_profile = 'buzz-ios-app-store';
+
+ALTER TABLE push_gateway_installations
+    DROP CONSTRAINT push_gateway_installations_app_profile_check;
+ALTER TABLE push_gateway_installations
+    ADD CONSTRAINT push_gateway_installations_app_profile_check
+    CHECK (app_profile = 'buzz-ios-dogfood');