getManifestTargets
Fetches the authoritative firmware board targets from a release's manifest URL. Returns null when the manifest cannot be retrieved or parsed, so callers can fail closed rather than offering an incompatible firmware update.