Plan AMI updates earlier

[mweinelt]

We're currently pinging Amine for EC2 AMI updates, but it usually happens too late, so they're not available on release day. Looping in Amine a few days earlier should solve that.

[jonringer]

For sustainability, we should probably have an automated pipeline, which can be launched by release-managers. Just need an admin to add the secrets