scripts: the rollout and the upstream-key helpers, with the runbook note

shorashim-rollout: restart, wait for 3/3, two consecutive 200s.
upstream-key-set: store a caller's model key for the gate scenario
without echoing it. KOHEN "Rolling out".

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

KOHEN.md

@@ -555,6 +555,17 @@ omits. Seven in all.
 `tov` means none fired on what could be read — not that the model is
 aligned, not that the output is true. Read `limits` in the response.
 
+### Rolling out — *Nesi'at haMishkan*
+
+`scripts/shorashim-rollout` (also installed at `~/.local/bin/`) restarts
+the deployment, waits for 3/3, and takes two consecutive 200s from
+`/kodesh/health` before reporting — a rollout is not done at 3/3 (NLB
+re-admission lag). A new image must already be pushed as `:latest`. If
+the day's manna has not been written, the new pod hangs at 2/3 until it
+is (Day 4). `scripts/upstream-key-set` stores a caller's model key for
+the gate scenario without echoing it (`~/.config/shorashim/upstream_keys`,
+0600) — run it from a real terminal, not through a non-interactive runner.
+
 ### Standing at the gate — *Bishe'arecha*
 
 A caller can put Shorashim between themselves and a model instead of