[SaladDay]

Deployment model defaults sealed the whole configuration while the same non-secret fields also sat in plaintext columns, which listing, admission and observation read. The sealed value is now the provider key alone, the columns are the only copy of everything else, and LoadBundle rebuilds the configuration from one row. Migration 000005 renames encrypted_config to encrypted_api_key and removes stored defaults, which cannot be converted in SQL; set them again. No API change; no doc described the storage.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}