Make migration scripts immutable (insert only, no update)