Safe Remediation as Risk-Constrained Intervention Decision in Microservice Systems