Make migration task non-interactive and use custom privileged creds

The miration task should be non-interactive to run during deploy,
and should use separate credentials to the application user (which
should not have access to schema-altering commands).