A public API needs fast revision rollback, traffic splitting, and no cluster patching responsibilities. Which option should be recommended?