SafeTelemetry demo: checkout service

This app runs on Cloud Run with the OpenTelemetry Collector as a sidecar. SafeTelemetry checks that a Collector change does not silently cut off the alerts, dashboards, and agent queries that read its metrics.

Deployed by this pipeline. Before this revision got traffic, the contract gate ran on its real output and passed.