Zero-downtime deploys: OIDC, circuit breakers, and Flyway expand-contract

Keyless GitHub Actions deploys to ECS that roll themselves back when things go wrong.

Context

Full write-up coming soon — this sample post exists so the layout can be built and verified before the CMS is connected.