The quarter that was one

`checkout` runs four replicas and needs three of them serving at all times. The rollout below is about to replace the image. Change the manifest so the service never drops below three ready replicas — and do not simply run more of them.

warm-up · about 8 minutes · graded on convergence, availability