feat: [POKA-YOKE][BEZALEL] Deployments: Make prod pushes impossible without staging verification (#1095)

Refs #1095
Agent: groq

File:** `README.md

@@ -0,0 +1,16 @@
+# Deployment Safety
+
+## Rollback Command
+
+To roll back a service to the last known good version:
+
+```bash
+bezalel-rollback <service-name>
+```
+
+Example:
+```bash
+bezalel-rollback the-nexus
+```
+
+This command swaps traffic to the last verified version of the service.