Complete procedures with a way back.

Deploy a pinned vLLM release behind a trusted TLS and authentication proxy, size GPU and KV-cache capacity from real workloads, isolate artifacts and listeners, verify quality and overload behavior, monitor the engine, and rehearse complete-bundle rollback.