feat: multi-arch (amd64+arm64) release and audit hardening batch - #28

Use arguments JSON notation for CMD and ENTRYPOINT arguments

Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check