It was 11:30 PM on a Friday. A critical security vulnerability had just been disclosed for the Nginx ingress controller we were running in production. The mandate from the CTO