[hemv-857]

Summary

Fixes #456: pin manylinux-x86_64-image = "manylinux2014" for linux x86_64 builds so glibc 2.17 (manylinux_2_17_x86_64) wheels ship again for Amazon Linux 2 / AWS Lambda / AWS SAM users who cannot compile from source without Rust.

Why replacing the default image is enough

manylinux_2_17 wheels install on any glibc >= 2.17, including the manylinux_2_28 systems the current default targets, so no second build pass is needed and existing users are unaffected.

Scope

• x86_64 only, matching the arch the issue reports; manylinux2014 aarch64 can follow as a separate change if wanted
• musllinux untouched (not glibc-related)
• the image is still officially maintained: cibuildwheel pins manylinux2014 at 2026.06.28-1, and pypa/manylinux ships CPython 3.9-3.15 / 3.15t in it, matching this repo's matrix

Test plan

• cibuildwheel@4.2.0 --platform linux --archs x86_64 --print-build-identifiers accepts the option and lists the same identifiers as before (cp39-cp315t, manylinux + musllinux)
• CI wheel builds (workflow needs approval for first-time contributors)
• after a CI run: auditwheel show on a produced wheel should report manylinux_2_17_x86_64

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.