migrate secrets from database to AWS Secrets Manager

AWS region (e.g., us-east-1)

AWS Access Key ID (optional, uses default credential chain if not provided)

AWS Secret Access Key (optional)

Custom endpoint URL for testing (e.g., LocalStack)

Prefix for secret names (e.g., windmill/)

Total number of secrets found

Number of secrets successfully migrated

Number of secrets that failed to migrate