docs/Multiple storage backends data migration documentation

[KarlG-nbis]

Related issue(s) and PR(s)

This PR closes #1913 .

Description

Add 23_populate_storage_locations.md describing data migration needed after schema migrated to version 23, update README.md to mention migratedb.docs directory

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

🔍 Trivy Scan - PostgresSQL 🔍

Target ghcr.io/neicnordic/sensitive-data-archive:PR2308-postgres (alpine 3.23.3)

Vulnerabilities (2)

Package	ID	Severity	Installed Version	Fixed Version	Title
zlib	CVE-2026-22184	CRITICAL	1.3.1-r2	1.3.2-r0	zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility
zlib	CVE-2026-27171	MEDIUM	1.3.1-r2	1.3.2-r0	zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

Target usr/local/bin/gosu

Vulnerabilities (19)

Package	ID	Severity	Installed Version	Fixed Version	Title
stdlib	CVE-2025-68121	CRITICAL	v1.24.6	1.24.13, 1.25.7, 1.26.0-rc.3	crypto/tls: Unexpected session resumption in crypto/tls
stdlib	CVE-2025-58183	HIGH	v1.24.6	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map
stdlib	CVE-2025-61726	HIGH	v1.24.6	1.24.12, 1.25.6	golang: net/url: Memory exhaustion in query parameter parsing in net/url
stdlib	CVE-2025-61728	HIGH	v1.24.6	1.24.12, 1.25.6	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip
stdlib	CVE-2025-61729	HIGH	v1.24.6	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate
stdlib	CVE-2025-47912	MEDIUM	v1.24.6	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url
stdlib	CVE-2025-58185	MEDIUM	v1.24.6	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1
stdlib	CVE-2025-58186	MEDIUM	v1.24.6	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http
stdlib	CVE-2025-58187	MEDIUM	v1.24.6	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509
stdlib	CVE-2025-58188	MEDIUM	v1.24.6	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509
stdlib	CVE-2025-58189	MEDIUM	v1.24.6	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information
stdlib	CVE-2025-61723	MEDIUM	v1.24.6	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem
stdlib	CVE-2025-61724	MEDIUM	v1.24.6	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto
stdlib	CVE-2025-61725	MEDIUM	v1.24.6	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail
stdlib	CVE-2025-61727	MEDIUM	v1.24.6	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs
stdlib	CVE-2025-61730	MEDIUM	v1.24.6	1.24.12, 1.25.6	During the TLS 1.3 handshake if multiple messages are sent in records ...
stdlib	CVE-2026-25679	UNKNOWN	v1.24.6	1.25.8, 1.26.1	url.Parse insufficiently validated the host/authority component and ac ...
stdlib	CVE-2026-27139	UNKNOWN	v1.24.6	1.25.8, 1.26.1	On Unix platforms, when listing the contents of a directory using File ...
stdlib	CVE-2026-27142	UNKNOWN	v1.24.6	1.25.8, 1.26.1	Actions which insert URLs into the content attribute of HTML meta tags ...

[jhagberg]

Nice addition, clear structure and good coverage of both single and multi-storage scenarios. Left a few comments, mostly small fixes and some consistency questions on the SQL WHERE clauses.

[jhagberg]

small nits