Support native binary-based stage1 bootstrap

# 🚀 feature request

### Relevant Rules

`py_binary`

### Description

With a similar motivation as #691, we would like to package a `py_binary` (including runfiles) into an `oci_image` and run it within a minimum base image like [distroless_base](https://github.com/GoogleContainerTools/distroless/tree/main/base) in order to minimize the attack surface. This does not come with a shell and other tools which are required by #1929 so this unfortunately doesn't help us.

### Describe the solution you'd like

Use a statically linked executable as loader.

### Describe alternatives you've considered

Add more stuff to the base image. This is suboptimal as this does not only increase the size but also the attack surface.

首先检查现有的 py_binary 和 oci_image 集成，然后阅读 #691 和 #1929 中的相关讨论。issue 中没有指定源文件或测试。完成的标准是：py_binary（包括其 runfiles）可以使用静态链接的可执行文件作为 loader，从最小的 distroless_base 镜像中运行。

由索引模型根据 Issue 内容生成。