Escaping the Linearity Trap: Manifold Detours for Black-Box Attacks on Singing Audio Deepfake Detection