* fix(iam): preserve MinIO permanent credentials in migration * test(iam): cover MinIO credential migration end to end