A feature-flag migration job starts before the secret rollout reaches the canary pods, and the flag backend rejects the writes

The release order seems safe, yet one dependency chain still lags behind the job that assumes it is ready.