Preserve the deployment verification script as an executable operational check so certificate-boundary acceptance is repeatable.
Enforce mTLS and least-privilege runtime boundaries while adding repeatable MySQL 8.4 and Docker smoke checks that require no production secrets.