Switch to using regional-service as a precursor to broader refactoring

[mattmoor]

After this, I plan to push most of the logic into a module that we invoke from the iac directory, which takes an image (and defaults to chainguard/octo-sts:latest.