Skip redundant force-deploy when tf-apply already triggered a rollout (#52)

## Summary
When tf-apply updates the ECS service (new task def revision), ECS
already starts a rolling deployment. The ecs-deploy step was then
calling `--force-new-deployment` on top of that, causing **two
sequential deployments** and doubling the stabilization wait (~5 min
instead of ~2 min).

Now checks if a deployment is already in progress (deployment count > 1)
and skips the force if so.

## Test plan
- [ ] Merge and trigger platform-test-app
- [ ] When tf-apply runs (has changes): deploy should say "Deployment
already in progress, waiting..." and finish in ~2 min
- [ ] When tf-apply is skipped (no changes): deploy should force as
before

Author: Alexanderamiri

scripts/ecs-deploy.sh

@@ -3,19 +3,30 @@
 #
 # Forces a new deployment so ECS pulls the latest image for the current
 # task definition. Does NOT create new task definition revisions — that's
-# Terraform's job. This avoids drift between TF-managed task defs
-# (with security hardening, volumes, etc.) and deploy-time revisions.
+# Terraform's job.
+#
+# If a deployment is already in progress (e.g. from tf-apply), skips the
+# force and just waits for it to stabilize.
 #
 # Usage: ecs-deploy.sh
 #
 # Env: CLUSTER, SERVICE
 
 set -e
 
-echo "Forcing new deployment for ${SERVICE} on ${CLUSTER}..."
-aws ecs update-service \
-  --cluster "$CLUSTER" --service "$SERVICE" \
-  --force-new-deployment > /dev/null
+# Check if a deployment is already rolling out
+DEPLOYMENT_COUNT=$(aws ecs describe-services \
+  --cluster "$CLUSTER" --services "$SERVICE" \
+  --query 'length(services[0].deployments)' --output text)
+
+if [ "$DEPLOYMENT_COUNT" -gt 1 ]; then
+  echo "Deployment already in progress (${DEPLOYMENT_COUNT} deployments), waiting..."
+else
+  echo "Forcing new deployment for ${SERVICE} on ${CLUSTER}..."
+  aws ecs update-service \
+    --cluster "$CLUSTER" --service "$SERVICE" \
+    --force-new-deployment > /dev/null
+fi
 
 echo "Waiting for service to stabilize..."
 aws ecs wait services-stable --cluster "$CLUSTER" --services "$SERVICE"