More robust CD

Outstanding changes after #40 

- Failure recovery (revert migrations if applied, revert to old image, restart server)
- s3 cleanup
- Manual restart trigger
- AWS SSM output -> print to GHA logs
- AWS SSM commands can get cleaned up