How would you design a Spring Boot microservice for resilience against downstream service failures?