fix(ci): retry migrations on permission denied

.gitea/workflows/run-migration.yml

@@ -57,7 +57,7 @@ jobs:
       - name: Identify new migrations
         id: diff
         run: |
-          ALL_NEW_FILES=$(git diff --name-only --diff-filter=A HEAD~1 HEAD -- 'apps/api/migrations/*.sql' || true)
+          ALL_NEW_FILES=$(git diff --no-renames --name-only --diff-filter=A HEAD~1 HEAD -- 'apps/api/migrations/*.sql' || true)
           NEW_FILES=$(echo "$ALL_NEW_FILES" | grep -Ev '(_down|rollback)\.sql$' || true)
           SKIPPED_ROLLBACK_FILES=$(echo "$ALL_NEW_FILES" | grep -E '(_down|rollback)\.sql$' || true)
           echo "new_files<<EOF" >> $GITHUB_OUTPUT
@@ -102,7 +102,7 @@ jobs:
             echo "=== Applying: $file ==="
             migration_err="$(mktemp)"
             if ! apply_migration "$PGURL_PSQL" "$file" 2>"$migration_err"; then
-              if grep -q "must be owner of table" "$migration_err"; then
+              if grep -Eq "(must be owner of table|permission denied for table)" "$migration_err"; then
                 if [ -z "$OWNER_PGURL_PSQL" ]; then
                   cat "$migration_err" >&2
                   echo "::error::migration requires table owner but DATABASE_URL secret is not set"