fix(release): keep owners and grants in production recovery points

Co-Authored-By: Grok (agent loop)

tests/test_rehearse_production_migrations.py

@@ -227,3 +227,14 @@ def test_host_mode_does_not_call_host_node_and_failed_cleanup_is_nonzero(tmp_pat
     docker_text = docker_log.read_text(encoding="utf-8")
     assert "--entrypoint node" in docker_text
     assert "DROP DATABASE" in docker_text
+
+
+def test_restore_keeps_backup_owners_and_compares_grants() -> None:
+    text = SCRIPT.read_text(encoding="utf-8")
+    assert "--no-owner" not in text
+    assert "ALTER TYPE" not in text
+    assert "typtype" not in text
+    assert "revoked_grants" in text
+    assert "chart_profiles_service_role_select_missing" in text
+    assert "role%3Dschema_owner" in text
+    assert "grant connect, create on database" in text