Move the runner token setting to happen before migrations
There is a recent migration that errors out if it can't ready the runner ciphertext, so the token needs to be in place before the migration.
There is a recent migration that errors out if it can't ready the runner ciphertext, so the token needs to be in place before the migration.