Gated promotion and progressive delivery

Moving a build forward is a decision the platform can check. Key points:

• Gated promotion: moving a build between environments is checked first, so only signed and scanned builds promote forward toward production.
• Progressive delivery: the platform generates Argo Rollouts and Flagger configurations for canary and staged rollouts. It generates the configs; your controller runs the rollout. Do not expect the platform to drive the canary.
• Feature flags are fully integrated with Unleash and Flagsmith, so you can decouple release from deploy when a config-driven rollout fits better.