Great writeup -- I have a gist floating around somewhere with a similar workflow, but for bitbucket pipelines.

Good solve!