[P2-E8] Deployment & operations

Everything an operator needs to stand up and run a dedicated synchronizer in the economy:
scripted bootstrap, permissioned-from-day-one, Helm packaging, upgrade runbook, and the
migration path for synchronizers that started in Phase 1.

—
Milestone: Phase 2 · Plan: [P2-E8-deployment-ops.md](https://github.com/ChainSafe/canton-extending-mainnet/blob/main/docs/planning/phase-2-epics/P2-E8-deployment-ops.md) · Leaves filed as sub-issues.

Start with docs/planning/phase-2-epics/P2-E8-deployment-ops.md and follow its sub-issues, since this issue is an epic. Identify the acceptance criteria for scripted bootstrap, initial permissions, Helm packaging, the upgrade runbook, and the Phase 1 migration path. Done means those operational deliverables are covered and their sub-issues are complete.

Written by the indexing model from the issue text.