And add a test
Unfortunately I don't know how to test these errors. As far as I can tell they should only happen if there was a programming error in the upgrade code or the underlying boltdb was corrupted somehow.
Also persist and load DeploymentStatus to avoid rechecking health after client restarts.