A team uses Ansible to update a database cluster with one primary and two replicas. The goal is zero downtime. Which update order is the safest?