Enable rpm's zstd payload support so the release manifest validator can read Fedora's native cargo-generate-rpm output. Refresh the warmed Cargo lock edge and repin all four no-cache release images.