perf(ci): make Terraform review build-free

Author: richiemcilroy

.github/workflows/deploy-aws.yml

@@ -70,14 +70,41 @@ jobs:
           fi
 
       - uses: aws-actions/amazon-ecr-login@v2
+        if: ${{ inputs.apply }}
 
       - uses: docker/setup-buildx-action@v3
+        if: ${{ inputs.apply }}
 
       - name: Build and push immutable service images
         id: images
+        env:
+          APPLY: ${{ inputs.apply }}
         run: |
           set -euo pipefail
           registry="$AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com"
+          if [[ "$APPLY" != true ]]; then
+            for service in rend-api rend-media-worker; do
+              case "$service" in
+                rend-api)
+                  family="rend-production-api"
+                  container="rend-api"
+                  ;;
+                rend-media-worker)
+                  family="rend-production-worker"
+                  container="rend-media-worker"
+                  ;;
+              esac
+              image="$(aws ecs describe-task-definition \
+                --task-definition "$family" \
+                --query "taskDefinition.containerDefinitions[?name=='$container'].image | [0]" \
+                --output text)"
+              [[ "$image" == "$registry/"*"@sha256:"* ]]
+              key="${service//-/_}_image"
+              echo "$key=$image" >> "$GITHUB_OUTPUT"
+            done
+            exit 0
+          fi
+
           build_time="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
           for service in rend-api rend-media-worker; do
             if digest="$(aws ecr describe-images \