chore: add `manual` tag to resolved toolchain aliases

This prevents the aliases from being picked up in a `bazelisk build //...`
which _cannot_ complete because some of the aliases do not have valid
resolved toolchains for all platforms.