Bump Rust and add per-arch Zig install
Use rust:1.94-bookworm and add TARGETARCH build arg. Replace the
pkgm-based Zig install with an explicit download of Zig 0.16.0,
mapping amd64/arm64 to x86_64/aarch64 binaries and symlinking the
zig binary into /usr/local/bin.