fix(cassandra): register nvct with legacy ESS auth

[sbaum1994]

TL;DR

Restores the legacy ESS authorization records required for nvct-api task creation in the 0.6.1 Cassandra migrations release line.

Additional Details

The 0.6.x ESS API reads the legacy SSA and notary authorization maps. The v0.10.2 release seeds nvct-api only in the newer OAuth map, causing task creation to fail with a forbidden client-not-registered response.

This adds the missing ordered ESS migration and extends the migration regression test to require both nvct-api registrations. It deliberately does not add the later SSA-column restoration migration because the v0.10 release branch already retains that column.

Customer Release Notes

Fixes task creation for fresh 0.6.1 self-managed installations.

Plan Summary

Not applicable.

Usage

Publish migrations/cassandra/v0.10.3 after this PR merges, then update the 0.6 stack release branch to consume the published image.

Testing

sh migrations/cassandra/tests/test-execute-sqls.sh

QA is needed: validate task creation on a fresh single-cluster 0.6.1 deployment using the published image.

Notes

No new third-party dependencies. NOTICE unchanged.

References

Closes #488

Related Pull Requests

#475

Dependencies

None

For the Reviewer

Please verify the nvct-api SSA and notary registrations in the new ordered migration.

Checklist

• I am familiar with the Contributing Guidelines.
• I have signed off my commits for Developer Certificate of Origin compliance.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.