fix(ai): constrain tokenizers and onnxruntime, drop obsolete arm64 protobuf pins (#693)

The worst-order install test caught tokenizers 0.23.1 against transformers' <0.21 requirement, and the r2 rebuilds drifted onnxruntime. Both are constrained now; the obsolete protobuf<5 arm64 pins are gone (arm64 resolves mediapipe 1.0.0, no python protobuf dependency); transcription and object-eraser-colorize point at r3 archives. Full worst-order install plus the 18-tool installed AI matrix passed against this manifest. Completes #669.

docker/feature-manifest.json

@@ -17,7 +17,9 @@
     "scikit-learn==1.4.2",
     "scikit-image==0.24.0",
     "pandas==2.2.2",
-    "huggingface-hub==0.36.2"
+    "huggingface-hub==0.36.2",
+    "tokenizers==0.20.3",
+    "onnxruntime==1.20.1"
   ],
   "bundleRepo": "deepsafe/feature-bundles",
   "bundles": {
@@ -162,16 +164,16 @@
           "extractedSize": 2249379840
         },
         "arm64-cpu": {
-          "file": "v2.0.0/object-eraser-colorize-arm64-cpu-r2.tar.gz",
-          "sha256": "6f9bd83c9791701dc95f62bc099eb5959be03adb84dd8793d7cae5c9d8f8e177",
-          "compressedSize": 1253858139,
-          "extractedSize": 1437089021
+          "file": "v2.0.0/object-eraser-colorize-arm64-cpu-r3.tar.gz",
+          "sha256": "18aaf0bc507e94e248296f3092e625ff6339365b6df7030439c4ec9465098bfa",
+          "compressedSize": 1253914457,
+          "extractedSize": 1437568952
         }
       },
       "packages": {
         "common": ["huggingface-hub[hf_xet]==0.36.2"],
         "amd64": ["onnxruntime-gpu==1.20.1"],
-        "arm64": ["onnxruntime==1.20.1", "protobuf>=4.25.3,<5"]
+        "arm64": ["onnxruntime==1.20.1"]
       },
       "pipFlags": {},
       "postInstall": [],
@@ -557,16 +559,16 @@
           "extractedSize": 845987840
         },
         "arm64-cpu": {
-          "file": "v2.0.0/transcription-arm64-cpu-r2.tar.gz",
-          "sha256": "34a7e6de0d8c5954b2d84838db00b3fc6a1f05923fe4051fba28cd722e9b4379",
-          "compressedSize": 519782354,
-          "extractedSize": 715158338
+          "file": "v2.0.0/transcription-arm64-cpu-r3.tar.gz",
+          "sha256": "19938e1220bdcfdbdb0e6c5019971b38b4a519f818d9cd29b789bc19de661485",
+          "compressedSize": 536230905,
+          "extractedSize": 781074121
         }
       },
       "packages": {
         "common": ["faster-whisper>=1.0.0", "huggingface-hub[hf_xet]==0.36.2"],
         "amd64": [],
-        "arm64": ["protobuf>=4.25.3,<5"]
+        "arm64": []
       },
       "pipFlags": {},
       "postInstall": [],