refactor: registryless oci_image

[thesayyn]

BREAKING CHANGES

• Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#compression or tar#compress attribute to compress the layers beforehand.
• Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically.

CHANGES

• OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster.
• oci_image now supports zstd compression
• fixes FR: Registryless oci_image  #484 and closes Selecting zot does not work with bzlmod #410, Registry fails to initialize for highly parallelized builds #285, Be able to use crane registry even if zot toolchain is registered #176, zot isn't ready in time (5s), perhaps this should be configurable? #170, registry implementations should print actionable errors  #148, refactor registry toolchain to have generic over registry binary and it's arguments #107

CHECKLIST

• detailed description
• add the layer with correct media type when base image is docker + add a test for it.
• use hermetic zstd
• run against distroless to check breakages, ask some of our customers to see if breaks anything.
• run a benchmark

[mortenmj]

Did a quick test here. Everything builds/tests fine, but running an oci_tarball gives an error like this:

open /var/lib/docker/tmp/docker-import-1867629837/blobs/sha256/a74371ebe00e8fad96ff8f7ec8421e280fd0828ecdd38457c8a2f7c1ceb1b870.tar.gz: no such file or directory

[thesayyn]

yeah, there's an unrelated change in this PR. thanks for the info!

[thesayyn]

@mortenmj did you see any significant speed-up/slow-down, do you have an before-after?

[thesayyn]

Benchmark: distroless building all images 5m 17s -> 3m 59s

[thesayyn]

Distroless all green!

Breaking changes are observed here: GoogleContainerTools/distroless#1586 (comment) 🌮

[thesayyn]

PTAL again, this is now ready.

[hanikesn]

Great work!

[hunshcn]

There seems to be an error in the description, which should be pkg_tar#extension.

Maybe this generation refers to the compression options, but it is confusing.