deb: install jq from distro package so deb builder images work on arm64

[ibrahim halatci (ihalatci)]

What / why

The deb builder installs jq via the amd64-only jq-linux64 GitHub release binary:

RUN curl -sL https://github.com/stedolan/jq/releases/download/jq-1.5/jq-linux64 \
         -o /usr/bin/jq \
    && chmod +x /usr/bin/jq

jq is used only in the release path of scripts/fetch_and_build_deb (GPG tag-signature
verification — .object.sha and .verification.verified), so it never surfaced on the jq-free
nightly path. But that hardcoded x86-64 binary hard-fails when the builder image runs on
arm64, which blocks the upcoming gated arm64 release .deb builds.

This swaps it for the distribution jq package, which is architecture-independent and present in
Debian/Ubuntu main across every target distro:

RUN apt-get update \
    && apt-get install -y --no-install-recommends jq \
    && rm -rf /var/lib/apt/lists/*

The two jq filters in use are trivial and work on any jq >= 1.5, so amd64 behavior is
unchanged.

Scope (surgical)

• templates/Dockerfile-deb.tmpl — the source of truth.
• 10 generated dockerfiles/*-all/Dockerfile (debian bookworm/bullseye/buster/stretch/trixie,
  ubuntu bionic/focal/jammy/noble/resolute) — regenerated from the template.

11 files, identical block swap in each (git diff --stat: 55 insertions / 44 deletions).
RPM (Dockerfile-rpm.tmpl) and pgxn dockerfiles are untouched.

Integrity

check_docker_files_integrity runs ./update_dockerfiles then git diff --exit-code dockerfiles.
Verified locally: after staging these edits, re-running the generator reproduces the committed
dockerfiles byte-for-byte (git diff --quiet dockerfiles → exit 0), so the check stays green.

Guardrails

• Draft — do not merge / mark ready without operator go.
• No arch gate here — this is a pure prerequisite for the gated (DEB_BUILD_MULTI_ARCH,
  default OFF) arm64 release deb legs on all-citus / debian-hll / debian-topn (follow-up PRs).
• No amd64 change — same jq binary is available, filters unchanged.

Part of Track 2 of citusdata/citus#8612 (arm64 Debian Docker images). Follows the merged nightly
leg #1198.