Make the hardened build canonical

Replace the comparison-branch narrative with one supported implementation.

Upload checksummed bundles from ARM64 CI and add a fail-closed release
installer. Attribute project modifications to Alex Ellis, OpenFaaS Ltd.

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>