Add linux/arm64 preview images and certify the install path

[Maneek21]

Deft currently publishes and certifies linux/amd64 only.

Acceptance criteria:

• publish a multi-arch or separate linux/arm64 image
• run doctor and browser smoke on arm64 hardware or emulation
• document the supported platform in release-manifest.json
• keep amd64 behavior unchanged