When enforcing OCI image spec broke customer containers

A container platform shipped a change to detect CPU architecture mismatches at image pull time. If an image's config says arm64 but the host is amd64, fail fast instead of letting the container start and die with exec format error. The implementation is correct, tests passed and reviewers approved. However, it caused a production impact and a quick rollback. It turns out customers had been running…