Patch production with S3 enabled CRIS importer (to get the migration run in production)

[frankhereford]

This is a patch on production to bring the S3 CRIS import enhancements online. This ETL work comes with a migration, hence rushing this out the door so we can update the ETL.

This PR is related to PR 1445.

I have observed that there are no other migrations in master that are not in production, so there should be no out-of-order conflicts, but please 👀 that assertion to make sure you agree.

---

Ship list

• [ ] Check migrations for any conflicts with latest migrations in master branch
• [ ] Confirm Hasura role permissions for necessary access
• [ ] Code reviewed
• [ ] Product manager approved

[frankhereford]

@johnclary Because this feature branch came off master and not production, it includes some work that made it into master after our last release party but before I started working on this. It looks like a toolbox script is getting to make it into production early. That OK with you?