Add migration to convert deprecated global-scoped permissions to domain-scoped equivalents, fixing RBACTypeConversionError in adminPermissions GraphQL query.