feat(rollout): target repair release to pre-0.9.2 clients

[yaojin3616]

Summary

• When a future 0.9.3 release workflow has published its archives, retire the enabled 0.9.2 rollout rules before enabling 0.9.3 at the initial 5%.
• Cap 0.9.3 offers at current versions below 0.9.2, including allowlisted installations. Keep the same bucket seed on rerun.
• Document the deployment order and add tests for rule creation, replacement, retries, and failure to retire the old rule.

This commit does not change today's live rules. The 0.9.3 archive is not published yet, and the backend support must be deployed before release cutover.

Verification

• npm test: 129 files, 1153 tests passed on this standalone branch.
• npm run typecheck
• git diff --cached --check passed before commit.