Upgrade operations

Read database migrations, execute the upgrade runbook, and keep the rollback runbook open during the change. Back up first, pin artifacts by digest, verify every runtime role, and do not call the change complete until a synthetic incident traverses the production path.