Extend documentation on upgrade process

One of the trickiest parts of running FDB is doing zero-downtime upgrades between protocol-incompatible versions. We have procedures at Apple to make this process safe, but there is not much detail about this in our official docs. We should try to get more detail about this process into our docs.