Via `sed` instead of a patch, in the hope that it might be less of a
maintenance burden compared to patch witch changes in the file to patch
with subsequent upstream releases.
Should only be merged once it's ensured there are no unforseen side
effects when built with the Plugin Certificates removed.
Switching to an Arch based build process for easier maintenance and
using specific runners for tasks where that might be necessary.
Right now, parent/child pipelines for somewhat parallel builds for
different architectures / semi-independent pak-builds don't seem to
properly work yet due to `trigger:` not being recognized when it should,
so that's not yet implemented.
