Canary sites

Canaries go first in every rollout, one at a time. If one fails, nothing else is touched. If they all pass, the rollout carries straight on — it does not wait for anyone to click anything.