Remote upgrade of gateway solids and greyscale release

Batch grayness reduces full network risk.

Once the gateway fails to upgrade, the whole network exits are lost. Remote upgrades must be grey: small batches of proof, then batched boosts, and a rollback route is maintained. Upgrade windows try to keep their peaks low and announce them in advance.