* chore: drain active calls before rolling updates * fix: add a devops secret header * fix: implement PR review