audit_arch: add lookup table for arch

A quick check of the auditd sources shows the audit arch is looked up
based on the machine field of struct utsname. Do something similar:
lookup the erlang architecture and convert it an AUDIT_ARCH_* atom.