db_migrate was failing because roles table was not created

This moves the 'Ensure all Audit Leads have Program Editor role or better' migration from the ggrc into ggrc_basic_permissions. This is because running db_migrate on an empty db fails to execute the delete clause because the user_roles table does not exist yet.