Function adoptLegacySecrets

Moves credentials that reached cfw_meta (an import, or a site from before sealed storage) into sealed storage. A sealed value always wins, so restoring a dump over a claimed site keeps that site's owner and credentials and deletes the incoming rows unread.