Broker API Versioning & Migration Playbook

Use when moving live order flow from one broker API version to the next: shadow reads, deterministic per-order canary routing that survives retries, latched rollback, and a translator that refuses to silently change time-in-force.