fix: goreleaser and container publish

[krakenhavoc]

This pull request updates the build and release process to support multi-architecture Docker images (amd64 and arm64) and switches to a distroless base image for improved security and smaller image size. It also updates the GitHub Actions workflow to use Docker Buildx and QEMU for cross-platform builds, and introduces Docker manifests for easier multi-arch image pulls.

Docker image and release process improvements:

• Added a new Dockerfile.goreleaser that uses the gcr.io/distroless/static-debian12:nonroot base image for a smaller and more secure runtime, and sets up the entrypoint for the krakenkey binary.
• Refactored the goreleaser.yaml Docker configuration to build and publish separate images for amd64 and arm64 architectures using Buildx, and to use the new Dockerfile.goreleaser for both.
• Added Docker manifests in goreleaser.yaml to group architecture-specific images under unified tags (e.g., latest, versioned tags), enabling multi-arch pulls.

Build pipeline enhancements:

• Updated the GitHub Actions workflow (release.yaml) to set up QEMU and Docker Buildx, enabling cross-platform Docker builds.

Minor configuration cleanup:

• Cleaned up the archives section in goreleaser.yaml by removing the redundant builds field under the krakenkey archive.