Variable changes can redeploy a stale configured image

After a variable-only rollout, verify the deployed route and version contract. If deployment is image-driven, explicitly deploy the current branch artifact before smoke testing; a variable mutation may redeploy an older configured image. Smoke-test at least one newly released identifier so application allowlists cannot silently outrun database definitions.