Production rollback and recovery

Restore the previous web and worker release safely.

How to use it

Let the production workflow perform automatic rollback on failed readiness. For an operator recovery, follow the checked-in release checklist and keep web/worker/database compatibility aligned.

Important behavior

Database migrations run before the swap and must be backward-compatible with the previously serving release.