CI/CD Best Practices for AWS ECS with GitHub Actions

OIDC federation over hardcoded keys is the single biggest security win in CI/CD pipelines and most teams still have not adopted it. We made the same switch with Terraform and GitHub Actions last quarter and the difference in operational confidence is night and day. Great to see this as step 1.