Pilot dry-run

End-to-end pilot bring-up: clean migrate, identity, TLS swap, backups, smokes, create → approve → publish.

Follow the canonical checklist in the repo:

docs/operations/pilot-dry-run.md

Narrative companion: Run a production pilot.