Add service update command and tighten CI change detection

.github/workflows/run_code_checks.yaml

@@ -32,15 +32,13 @@ jobs:
               - '**/*.rs'
               - '**/Cargo.toml'
               - 'Cargo.lock'
-              - 'maskfile.md'
               - '.flox/**'
               - 'devenv.*'
               - '.github/**'
             python:
               - '**/*.py'
               - '**/pyproject.toml'
               - 'uv.lock'
-              - 'maskfile.md'
               - '.flox/**'
               - 'devenv.*'
               - '.github/**'

maskfile.md

@@ -200,7 +200,7 @@ esac
 cd infrastructure/
 
 if ! organization_name=$(pulumi org get-default 2>/dev/null) || [ -z "${organization_name}" ]; then
-    echo "Error: Pulumi default organization not set. Run: pulumi org set-default <org>"
+    echo "Error: Pulumi default organization not set. Run: pulumi org set-default <organization>"
     exit 1
 fi
 pulumi stack select "${organization_name}/fund/production"
@@ -415,6 +415,45 @@ case "$application_name" in
 esac
 ```
 
+#### update (service_name)
+
+> Force redeploy an ECS service with the latest image (e.g. `ensemble-manager`)
+
+```bash
+set -euo pipefail
+
+echo "Updating ${service_name} service"
+
+cd infrastructure/
+
+if ! organization_name=$(pulumi org get-default 2>/dev/null) || [ -z "${organization_name}" ]; then
+    echo "Error: Pulumi default organization not set. Run: pulumi org set-default <organization>"
+    exit 1
+fi
+pulumi stack select "${organization_name}/fund/production"
+cluster=$(pulumi stack output aws_ecs_cluster_name)
+
+cd "${MASKFILE_DIR}"
+
+case "${service_name}" in
+    data-manager|portfolio-manager|ensemble-manager) ;;
+    *)
+        echo "Unknown service: ${service_name}"
+        echo "Valid options: data-manager, portfolio-manager, ensemble-manager"
+        exit 1
+        ;;
+esac
+
+service="fund-${service_name}-server"
+
+aws ecs update-service --cluster "$cluster" --service "$service" --force-new-deployment --no-cli-pager > /dev/null
+echo "Deployment started: ${service}"
+
+echo "Waiting for ${service} to stabilize"
+aws ecs wait services-stable --cluster "$cluster" --services "$service"
+echo "Deployment complete: ${service}"
+```
+
 ### models
 
 > Manage Prefect Cloud model resources