Replace GORM + AutoMigrate with golang-migrate + sqlc

.github/workflows/migration-immutability.yaml

@@ -0,0 +1,35 @@
+name: Migration Immutability
+
+on:
+  pull_request:
+    branches: [main, release/v0.7.x]
+    paths:
+      - "go/core/pkg/migrations/**"
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Fail if any existing migration file was modified
+        run: |
+          # List files under go/core/pkg/migrations/ that were changed relative
+          # to the merge base of this PR.  We only care about modifications (M)
+          # and renames (R); additions (A) are fine.
+          BASE=$(git merge-base HEAD origin/${{ github.base_ref }})
+          MODIFIED=$(git diff --name-only --diff-filter=MR "$BASE" HEAD \
+            -- 'go/core/pkg/migrations/**/*.sql')
+
+          if [ -n "$MODIFIED" ]; then
+            echo "ERROR: The following migration files were modified."
+            echo "Migration files are immutable once merged."
+            echo "Fix bugs with a new migration instead."
+            echo ""
+            echo "$MODIFIED"
+            exit 1
+          fi
+
+          echo "OK: no existing migration files were modified."

.github/workflows/tag.yaml

@@ -18,6 +18,7 @@ jobs:
       matrix:
         image:
           - controller
+          - migrate
           - ui
           - app
           - golang-adk

Makefile

@@ -40,20 +40,23 @@ APP_IMAGE_NAME ?= app
 KAGENT_ADK_IMAGE_NAME ?= kagent-adk
 GOLANG_ADK_IMAGE_NAME ?= golang-adk
 SKILLS_INIT_IMAGE_NAME ?= skills-init
+MIGRATE_IMAGE_NAME ?= migrate
 
 CONTROLLER_IMAGE_TAG ?= $(VERSION)
 UI_IMAGE_TAG ?= $(VERSION)
 APP_IMAGE_TAG ?= $(VERSION)
 KAGENT_ADK_IMAGE_TAG ?= $(VERSION)
 GOLANG_ADK_IMAGE_TAG ?= $(VERSION)
 SKILLS_INIT_IMAGE_TAG ?= $(VERSION)
+MIGRATE_IMAGE_TAG ?= $(VERSION)
 
 CONTROLLER_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(CONTROLLER_IMAGE_NAME):$(CONTROLLER_IMAGE_TAG)
 UI_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(UI_IMAGE_NAME):$(UI_IMAGE_TAG)
 APP_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(APP_IMAGE_NAME):$(APP_IMAGE_TAG)
 KAGENT_ADK_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(KAGENT_ADK_IMAGE_NAME):$(KAGENT_ADK_IMAGE_TAG)
 GOLANG_ADK_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(GOLANG_ADK_IMAGE_NAME):$(GOLANG_ADK_IMAGE_TAG)
 SKILLS_INIT_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(SKILLS_INIT_IMAGE_NAME):$(SKILLS_INIT_IMAGE_TAG)
+MIGRATE_IMG ?= $(DOCKER_REGISTRY)/$(DOCKER_REPO)/$(MIGRATE_IMAGE_NAME):$(MIGRATE_IMAGE_TAG)
 
 #take from go/go.mod
 AWK ?= $(shell command -v gawk || command -v awk)
@@ -219,7 +222,7 @@ prune-docker-images:
 	docker images --filter dangling=true -q | xargs -r docker rmi || :
 
 .PHONY: build
-build: buildx-create build-controller build-ui build-app build-golang-adk build-skills-init
+build: buildx-create build-controller build-migrate build-ui build-app build-golang-adk build-skills-init
 	@echo "Build completed successfully."
 	@echo "Controller Image: $(CONTROLLER_IMG)"
 	@echo "UI Image: $(UI_IMG)"
@@ -267,6 +270,10 @@ controller-manifests:
 build-controller: buildx-create controller-manifests
 	$(DOCKER_BUILDER) build $(DOCKER_BUILD_ARGS) $(TOOLS_IMAGE_BUILD_ARGS) --build-arg BUILD_PACKAGE=core/cmd/controller/main.go -t $(CONTROLLER_IMG) -f go/Dockerfile ./go
 
+.PHONY: build-migrate
+build-migrate: buildx-create
+	$(DOCKER_BUILDER) build $(DOCKER_BUILD_ARGS) $(TOOLS_IMAGE_BUILD_ARGS) --build-arg BUILD_PACKAGE=core/cmd/migrate/main.go -t $(MIGRATE_IMG) -f go/Dockerfile ./go
+
 .PHONY: build-ui
 build-ui: buildx-create
 	$(DOCKER_BUILDER) build $(DOCKER_BUILD_ARGS) $(TOOLS_IMAGE_BUILD_ARGS) -t $(UI_IMG) -f ui/Dockerfile ./ui