having the jenkins build history reflect release deployments generally works well enough.

if build #20 is bad, build #19 deployed with hash XYZ was last known good, click 'rebuild' or 'replay' and it'll deploy #19 again.