startup probe

A Cloud Run check that must pass before an instance gets traffic. Pointing it at `/health` stops a broken revision from ever serving.