Add oci_tarball rule

[lorenz]

Adds a dedicated version of oci_load's tarball output group as that carries runfiles with it which are not needed and can cause issues due to some of them being tree artifacts.

These should really not be the same rule for multiple reasons like one needing runfiles and target platform execution and the other one a single output file with no runfiles and exec platform execution. I've kept things backwards-compatible but using oci_load's tarball output should be discouraged in the future.

Fixes #889

[aspect-workflows]

Test

⚠️ Buildkite build #219 failed.

//examples/cmd_location_expansion:assert_cmd_is_escaped_gen failed to build

bash failed: error executing Genrule command (from target //examples/cmd_location_expansion:assert_cmd_is_escaped_gen) /bin/bash -c ... (remaining 1 argument skipped)
 
Use --sandbox_debug to see verbose messages from the sandbox and retain the sandbox build root for debugging
 
docker: Error response from daemon: client version 1.42 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer version.
See 'docker run --help'.

//examples/env:assert_version_is_correct_gen failed to build

bash failed: error executing Genrule command (from target //examples/env:assert_version_is_correct_gen) /bin/bash -c ... (remaining 1 argument skipped)
 
Use --sandbox_debug to see verbose messages from the sandbox and retain the sandbox build root for debugging
 
docker: Error response from daemon: client version 1.42 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer version.
See 'docker run --help'.

Failed tests (1)

//docs:update_1_test [k8-fastbuild]  🔗

💡 To reproduce the build failures, run

bazel build //examples/cmd_location_expansion:assert_cmd_is_escaped_gen //examples/env:assert_version_is_correct_gen

💡 To reproduce the test failures, run

bazel test //docs:update_1_test

[lorenz]

Test failures look unrelated.