refactor(db): migrate user rule settings

docs/infrastructure/database-ownership.md

@@ -68,12 +68,15 @@ Created by EF migrations, never by the reconciler:
 
 `AccountDeletionFiles`, `AccountDeletionRequests`, `AiUsageRecords`, `Attachments`, `Companies`,
 `Correspondences`, `EmailDrafts`, `EmailSendAttempts`, `JobApplications`, `JobEvents`, `Jobs`,
-`RuleSettings`, `SystemEmailSettings`, `UserNotifications`, and `UserOperations`.
+`RuleSettings`, `SystemEmailSettings`, `UserNotifications`, `UserOperations`, and `UserRuleSettings`.
 
 `SystemEmailSettings` is the first completed ownership transfer: migration
 `20260830120000_AdoptSystemEmailSettingsSchema` creates it for both supported providers and preserves
 an existing reconciler-created MariaDB table. Startup no longer creates it.
 
+`UserRuleSettings` followed in `20260830121000_AdoptUserRuleSettingsSchema`; its owner-keyed rows are
+preserved across adoption, downgrade and retry, and startup no longer creates it.
+
 The reconciler may **repair** these (add a missing column, add an index, fix a non-`AUTO_INCREMENT`
 primary key) and may seed the default `RuleSettings` row — but it must never `CREATE TABLE` them.
 It used to create `RuleSettings`, which is precisely why a clean install failed with
@@ -83,7 +86,7 @@ It used to create `RuleSettings`, which is precisely why a clean install failed
 
 Created by `StartupInitializationExtensions`, with a **no-op migration** holding the model snapshot:
 
-`UserRuleSettings`, `CvUploadArtifacts`, `CvExtractionRuns`,
+`CvUploadArtifacts`, `CvExtractionRuns`,
 `GmailConnections`, `MicrosoftGraphConnections`, `ImapConnections`, `TailoredCvDrafts`,
 `CareerProfiles`, `CareerProfileVersions`, the six CareerProfile children (`CareerExperiences`,
 `CareerEducations`, `CareerSkills`, `CareerProjects`, `CareerCertifications`, `CareerLanguages`),