Operations runbook

A first real fleet, start to finish. See docs/design.md for the authoritative spec and docs/architecture.md for how the pieces fit together. Most of this runbook has been exercised against a real AWS account, but teardown and foundation update themselves are still exercised only against mocked AWS; a handful of narrower unresolved points are marked (unverified) below.