Ship zero-downtime releases with canary/blue-green, expand-contract migrations, and one-command rollback.