Environmental hedging: Theory and method for reconciling reservoir operations for downstream ecology and water supply