Remove `rules_oci` unhermetic tools from container

rules_oci current needs mktemp, dirname, tar, xargs and tr.

Seems rules_oci^2 will be hermetic.

Once we can upgrade, we can remove those tools.