Without Argo Rollouts or a service mesh, canaries mean manual traffic splitting or separate deploys. What's the lightest-weight approach that's still safe?