Rollback Runbook

Rollback requires approval from the accountable owner.

1. Identify last known good code/image.
2. Check whether disabling flags is enough.
3. Redeploy previous code if needed.
4. Restore database only when approved and backed by a verified backup.
5. Run /api/ready, login, smoke, and manager checks.
6. Document approver, reason, and outcome.