Hm it sounds like this problem is caused by having high barriers between developers and operations. A configuration push and a code push aren't really differen

Hm it sounds like this problem is caused by having high barriers between developers and operations. A configuration push and a code push aren't really different in principle, but a lot of organizations make them different in practice. You should be able to recompile your binary reliably and reproducibly! Where I work, developers and operations work out of the same source tree. I can see a lot of advantages in this style and few disadvantages.