Add out_of_scope_reason, tests, and database migration

Out of scope now requires a reason in order to be a valid change.