fix(plugin-auth): the owner-bind gate decides once, so a first boot logs no refused sys_migration insert

fix(plugin-auth): the owner-bind gate decides once, so a first boot logs no refused sys_migration insert #43267