Why I write a postmortem for every meaningful incident, and the template that makes it take 45 minutes.