docs: add DBA grant script and Phase 1 VersionSet approval checklist

- scripts/dba/grant-migration-test-db-ownership.sql: for a DBA to run,
  fixes the kartsell_migration_test ownership regression blocking
  DbUpMigrationTests/DbUpRecoveryTests (12 tests) locally.
- docs/CURRENT/PHASE-1_APPROVAL_CHECKLIST.md +
  scripts/phase1/template-approve-versionset.sql: documents/templates the
  human maker-checker approval steps needed to freeze a VersionSet before
  Phase 1 shadow run can be re-queued. Does not perform any approval —
  every placeholder must be filled by a real, named maker and a different
  named checker. No automation should insert rows into dataset_manifest /
  model_version_registry / evidence_snapshot / release_evidence_bundle.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

scripts/dba/grant-migration-test-db-ownership.sql

@@ -0,0 +1,30 @@
+-- DEBT: AEG-X-004 regression (2026-08-07) — see docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv row AEG-X-004
+--   and CURRENT_ROADMAP.md "알려진 문서 정합성 문제" #2.
+--
+-- Symptom: 12 DbUpMigrationTests (Migration0008/0009/0010/0032) fail locally with
+--   Postgres 42501 "must be owner of database kartsell_migration_test" — the `kartsell`
+--   DB user can no longer DROP+CREATE that database, which the fresh/upgrade/re-run
+--   rehearsal requires.
+--
+-- Run this as a Postgres superuser (or the role that currently owns kartsell_migration_test)
+-- against the target server, NOT as the `kartsell` application user (it cannot grant itself
+-- ownership of a database it does not already own).
+--
+-- Usage:
+--   psql -h <host> -p 5432 -U <superuser> -d postgres -f scripts/dba/grant-migration-test-db-ownership.sql
+
+ALTER DATABASE kartsell_migration_test OWNER TO kartsell;
+
+-- If the database does not exist yet on this server, create it first, then re-run the ALTER
+-- above (CREATE DATABASE already makes the creating role the owner, so the ALTER becomes a
+-- no-op in that case):
+--   CREATE DATABASE kartsell_migration_test OWNER kartsell;
+
+-- Verify:
+--   SELECT datname, pg_catalog.pg_get_userbyid(datdba) AS owner
+--   FROM pg_database WHERE datname = 'kartsell_migration_test';
+-- Expected: owner = kartsell
+
+-- After this grant, re-run the isolated rehearsal to confirm:
+--   dotnet test --filter "FullyQualifiedName~DbUpMigrationTests" -c Release
+--   dotnet test --filter "FullyQualifiedName~DbUpRecoveryTests" -c Release