appview: state: verify if commit is a valid hash before fetching

spindle/microvm: build images for the host arch (aarch64 support)