Some progress: hiding titles in feeds and on the site, and I think the publishing workflow (git -> CodeBuild -> S3 -> invalidate Cloudfront) is working the way I want