migration: Use strnlen() for fixed-size string