Idempotent Provisioning

Provisioning operations (CREATE ROLE, CREATE SCHEMA, CREATE TABLE) must always sync state on re-run — never skip updates when the resource already exists.