Copilot review fixes

Author: aclark4life

django_mongodb_backend/base.py

@@ -251,7 +251,9 @@ def get_database_version(self):
         """Return a tuple of the database's version."""
         # This can use PyMongo's
         # `tuple(self.connection.server_info()["versionArray"])` on
-        # pymongocrypt>=1.14.2. See: https://jira.mongodb.org/browse/PYTHON-5429
+        # TODO: Replace with `tuple(self.connection.server_info()["versionArray"])` once
+        # pymongocrypt >= 1.14.2 is required and PYTHON-5429 is resolved.
+        # See: https://jira.mongodb.org/browse/PYTHON-5429
         return tuple(self.connection.admin.command("buildInfo")["versionArray"])
 
     ## Transaction API for django_mongodb_backend.transaction.atomic()

django_mongodb_backend/routers.py

@@ -22,6 +22,12 @@ def allow_migrate(self, db, app_label, model_name=None, **hints):
 
 # This function is intended to be monkey-patched as a method of ConnectionRouter.
 def kms_provider(self, model, *args, **kwargs):
+    """
+    Monkey-patched method for ConnectionRouter to resolve a KMS provider for a given model.
+    Iterates through all configured database routers, calling their `kms_provider` method (if present)
+    to determine the appropriate Key Management Service (KMS) provider for the specified model.
+    Returns the first non-None result found. Raises ImproperlyConfigured if no provider is found.
+    """
     for router in self.routers:
         func = getattr(router, "kms_provider", None)
         if func and callable(func):

django_mongodb_backend/schema.py

@@ -440,7 +440,7 @@ def _create_collection(self, model):
                 raise ImproperlyConfigured(
                     "Encrypted fields found but "
                     f"DATABASES[{self.connection.alias}]['OPTIONS'] is missing "
-                    "auto_encryption_opts."
+                    f"Encrypted fields found but DATABASES['{self.connection.alias}']['OPTIONS'] is missing auto_encryption_opts."
                 )
             encrypted_fields_map = getattr(auto_encryption_opts, "_encrypted_fields_map", None)
             if not encrypted_fields_map:
@@ -484,7 +484,10 @@ def _get_encrypted_fields_map(self, model, client, create_data_keys=False):
                 else:
                     key_doc = key_vault_collection.find_one({"keyAltNames": key_alt_name})
                     if not key_doc:
-                        raise ValueError(f"No key found in keyvault for keyAltName={key_alt_name}")
+                        raise ValueError(
+                            f"No key found in keyvault for keyAltName={key_alt_name}. "
+                            "You may need to run the management command with '--create-data-keys' to create missing keys."
+                        )
                     data_key = key_doc["_id"]
                 field_dict = {
                     "bsonType": field.db_type(connection),