http.Server.Shutdown timeout boundary for zero-downtime migration
Goal is to migrate a small Go HTTP service without dropping in-flight requests. The design relies on http.Server.Shutdown to stop accepting new connections while allowing existing handlers to finish, supporting a zero-downtime hand-off. Constraints involve the shutdown signal timing, the boundary for long-running handlers, and behavior with TLS connections.