/api/health now reports REVISION alongside status, and the CI wait step checks for this deploy's own short SHA specifically - a stray old container that never got torn down (or a build that silently kept serving stale code) would still 200 on a plain health check but now won't match.