Carry a finished artifact from Bento to Sando
sando: gate every database's migrations, not only the server's
sando: refuse unprovisioned promotes, harden the companion path guard, drop the stale hook