Look into moving tarball/squashfs image creation into the deploy step

[gregharvey]

If this step fails during 'cleanup' it's a problem, because the build essentially fails however the initial deploy run succeeded, so the _exit role updates the track file incorrectly. We should make the ASG handling actually part of the deploy operation, not cleanup. This could be either by moving the code from cleanup.yml to deploy.yml (if we think that's safe) or by moving it to it's own role entirely (might make more sense and be more flexible).