Shadow deployment

Running a candidate model/prompt on live traffic without serving its outputs, to compare behavior safely before cutover.