-- Stop exposing AI provider API keys + SMTP password to the browser. -- Problem before this migration: -- - `crm_runtime_settings` is SELECTed by the admin UI on ...