migrator: Make `upgrade` bounds check fail-fast

Created by: efritz

See RFC 697: Multiple version upgrades.

The sg migration upgrade/migrator upgrade command introduced in #39265 asks the user for the instance's current version. We should likely get this from the database instead (if actually upgrading, it should be stored in the versions table from a previous instance run).