issue 1841/S8: upgrade the nodes one at a time in a weekly round in upgrade-order, stopping at a failure and passing a node only on the operator's Approve, so one bad upgrade never reaches every machine

modules/pacman/module.json

@@ -14,6 +14,9 @@
   "reads": [
     "mesh-controller.declared-packages"
   ],
+  "uses": [
+    "operator-channel"
+  ],
   "config": {
     "upgrade-order": {
       "type": "list",
@@ -73,6 +76,7 @@
     "pacman_upgrade",
     "pacman_upgrade_health",
     "pacman_upgrades",
+    "pacman_round",
     "pacman_orphans",
     "pacman_remove_orphans",
     "pacman_cache",
@@ -195,7 +199,8 @@
           "upgrade.checked",
           "rollback.started",
           "rollback.finished"
-        ]
+        ],
+        "asks": true
       },
       "health": {
         "kind": "tool",
@@ -218,7 +223,10 @@
         "binary": "pacman-tools",
         "loads": [
           "pacman-tools"
-        ]
+        ],
+        "env": {
+          "PACMAN_KEEPER_CONFIG": "${dir:state}/keeper.json"
+        }
       },
       {
         "name": "files",