Upgrade strategy

• Scanner image is versioned (enterprise registry)
• Rolling updates supported via Kubernetes deployments
• Upgrade cadence can be controlled by the tenant admin