uses the manifest command from podman, which hopefully is the same as docker. manifest-tool is the old-and-busted way of doing multi-arch in any case