pub fn load_config() -> Config
Step 2: Parse CLI args and build config. Dispatches the migrate subcommand (and exits) before touching AUTH_KEY-gated config.
migrate