Stop silently storing incomplete remote xcresult/test runs

Fixes silent partial ingestion of remote-processed test results. In the previous Helm chart, the least-privilege tuist_processor database role could not read the webhook_endpoints table, so any test run that introduced a new test case on the default branch caused a permission-denied error mid-ingestion. The Oban worker retried until it was discarded, leaving runs with a non-deterministic subset of test cases (and duplicate test_run_destinations rows from each retry). Chart 0.17.2 applies the processor’s per-table grants during migration so the role gets SELECT on webhook_endpoints automatically, preventing this partial-data state on the next deploy. Note: existing partial runs will not self-heal; re-run or re-upload them for a clean ingest.