Docker dep

[xansec]

This is a BREAKING change. The following open issues have been resolved:

• Previously, the mayhem_run rule was invoked with bazel build, which A. was counterintuitive and B. prevented users from running multiple times as Bazel would not kick off a run if no files were modified (because it considered it a build output). Now, mayhem_run rules are invoked with bazel run. This is accomplished using runfiles, which is now necessary to enable in .bazelrc with common --enable_runfiles.
• Previously, sarif and junit files were saved under the bazel-rules_mayhem root directory. Now, they are saved in the same directory as the target runfiles (i.e. my_target.sh.runfiles/_main)
• Added support for image_dependency for the mayhem_run rule, so that the output of a call to oci_push can be depended on prior to running Mayhem.
• Fixed a bug where owner information for the mayhem wait command could be duplicated, causing the command to fail.
• Added rules_shell and rules_cc as dependencies as they are no longer part of Bazel core.

How to migrate to 0.8.4:

1. You will need to update references to the mayhem_run() rule so that they call bazel run instead of bazel build (note: bazel build will technically still work, but it doesn't do anything other than generate the run script).
2. If you are on Windows, you'll need to add common --enable_runfiles (or common:windows --enable_runfiles if you are using platform-specific configuration).
3. If you were referencing junit or sarif files from the bazel-rules_mayhem root directory, you will now want to grab these from the target runfiles directory.