ability to restart all production vats

[turadg]

What is the Problem Being Solved?

As we perform upgrades to parts of the stack, running vats don't automatically get them. Only upon restart does a vat's environment change. That's a good thing architecturally, but operationally we want to minimize the number of concurrent versions in production.

Description of the Design

Some mechanism to restart all the vats.

TBD whether to make an exception for the bootstrap vat. It's currently not upgradable/restartable (#8849).

To make it restartable we'll have to store the 5 objects that are still heap-only:

agoric-sdk/packages/vats/test/bootstrapTests/test-vaults-upgrade.js

Lines 163 to 176 in 5eb596e

	test.serial('audit bootstrap exports', async t => {
	const expected = {
	maxExports: 5,
	maxNonDurable: 5,
	ifaces: {
	// in bridgeCoreEval()
	coreHandler: true,
	// in bridgeProvisioner()
	provisioningHandler: true,
	'prioritySenders manager': true,
	// TODO? move to provisioning vat?
	clientCreator: true,
	},
	};

Security Considerations

Scaling Considerations

Test Plan

Upgrade Considerations