As an idempotent system, having to rerun to correct failures or perform updates should be fast.

It appears that reruns are attempting to run all items over again. To reduce time and friction, it would be a good idea to store a version/release number to check for new functionality or updates to existing, and run a check for the configuration before attempting to apply it, then skip those that are present and on the latest changeset.