Prevent device flags from invalidating the build cache

The @rules_labgrid//labgrid/flag/device flags don't have any scope at the moment, so they would invalidate the whole build graph. We need to constraint them somehow to the toolchains that use them.