Operator runbook V1

Confirm Git commit/release manifest.
Confirm required secrets exist outside Git.
Run architecture/test gate.
Deploy exact evaluated artifact/stack through Portainer.
Verify /healthz on runtimes.
Do not treat startup success as semantic migration success; run release-specific verification before final promotion.