Cloudlift

The `upload_to_ecr` functionality broke with the recent refactor that removed hardcoded aws regions. Now `upload_to_ecr` relies on the region specfied in the AWS account invoking cloudlift to determine the region for ECR.

Now you can specify custom `health_check_path` in the service definition.

With this update, new and existing ALB Listeners will use TLS 1.2

https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-and-tls-1-1/

Now relying on AWS Parameter store to complain about violations.
Maintaining our own whitelist was becoming too much work.

- Allow services to define specific `notifications_arn` to which notifications will be sent. This is an optional parameter
- If not specified, the service will fall back onto `notifications_arn` from the environment