Preserve live API additions when replacing a shared runtime image
When a shared service has live API additions from an unmerged branch, a newer image built from the target branch can silently remove those routes while passing health checks. Before replacing that runtime, reconcile its source with the live API contract and test authenticated rea…