Is your feature request related to a problem? Please describe.
Connection strings with credentials must currently be passed via CLI args, which can leak through shell history, CI logs, crash dumps, or ps listings.
Describe the solution you'd like
Allow migrate to read the connection string in this order:
-database arg
- Env var specified by -env flag (default: DATABASE_URL)