i think i finished instance deletion
- front sets the instance state to "cancelled", it triggers a clean shutdown
- 30 days later, the "cancelled" instance gets permanently deleted and becomes "deleted"
- front pulls the new state
so normally no instance can be deleted without being down for a month, and re-deploying it during that month cancels the deletion.
looks okay