v1.0.2 — registry compatibility

Fixes the published image manifest so it can be read by tools expecting the standard Docker manifest-list media type — including Unraid Community Applications' scanner, which reported latest as missing.

buildx adds provenance and SBOM attestations by default, which turn a multi-arch manifest into an OCI image index containing unknown/unknown entries. Those are now disabled.

No changes to the application.