#450 P4: Add Encryption Migration Script

Issue #15 from review: Old data remains unencrypted. Location: engine/security/jsonb_encryption.py. Finding: No backfill mechanism for existing plaintext data. Fix: Create migration script to re-encrypt existing JSONB columns. Effort: 4 hours.