What I am going for is a 'one click' roll out, it is mostly there.

I think i'll take the advice of keeping the quick start image and secret refs in the infra deployment.

Then use the Aure CLI to build, push and pull images.

The DevOps pipeline I can see no way of automating the creation and update of the actual pipeline so will need to work on meaningful deployment outputs.