* build: verify native Windows and Linux ARM64 bundles
* fix: select native ARM64 tools before Windows x64 fallback
* build: register verified ARM64 updater bundles and remove verification workflow
* fix(agent): prefer npx and uvx over emulated x64 binaries on Windows ARM64
Each build's tauri-action rewrote the shared latest.json by deleting and re-uploading it, so
parallel macOS builds raced: one failed with 404 on the delete (skipping DMG notarization), or a
platform could silently drop out of the manifest. The builds no longer upload it; a new
updater-manifest job builds it once from the uploaded .sig files and fails if any platform is
missing. publish waits for it.
Claude-Session: https://claude.ai/code/session_01Dq6jQQn8ZhRfkkyj3PRutA
l0ng-ai