Spent the weekend building the migrator program. Went with Pinocchio, zero-copy, kept the surface as small as possible. The whole thing is one transaction, burns your old token and mints the new one. If anything fails nothing moves. Tested with Mollusk, and Kani.