Consolidated gated-deploy runbook for the P2P security remediation. Contains no secret values — only the names of the env vars/secrets the owner sets on staging/prod.