Run `kamal deploy` against the config/deploy.yml rendered by awf-kamal-config, and record Infra.kamal.last_deploy_image on success. Always invokes kamal; action reflects state-file delta only.
