`hermetic_cc_toolchain` does not work on remote execution due to not registering
the executor constraints for the toolchains.

Build the binary in pure mode to remove the need for a C toolchain.

Bazel will select a version within the `compatibility_level`, the warning is noise.

These were used to test projects before they were upstreamed to BCR.

We can remove them now.

Changes both `tar_filter`/`tar_concatenate` to use `//tar/tool` rather
than individidual toolchains.

This change brings significant features:

  - Inputs are transparently decompressed using file magic markers
    - Data on `stdin` is decompressed correctly now
  - Outputs are trasparently compressed using the file extension
  - (De)compression is all performed in-process removing the need for Shell pipes
  - Many bug fixes are squashed during the refactor in the Go code

A huge footgun has been removed where the extension were not respected:

```py
# Without the `compress` attribute, this creates a `archive.tar.gz` that
# is actually a tape archive that is _not_ compressed
tar_concatenate(
    name = "archive.tar.gz",
    # compress = "@rules_tar//tar/compress:gzip",
    srcs = ["archive.tar.xz", "something.tar.gz"],
)
# With this patch it is now correctly compressed with `gzip`
```

BREAKING CHANGE: `tar_filter#patterns` is now a list of globs to remove
from the tape archive. The filters can still be negated:

```py
tar_filter(
    name = "filter.tar.xz",
    src = "archive.tar.zst",
    patterns = [
        "!**/*.md",  # Keep Markdown files
        "**/*",      # Remove all other members
    ],
)
```

A generic Go binary that provides concatenation and filtering
of tape archives.

API to seek until the start of the next tape archive in a
stream of bytes.

Provides glob matching for multiple patterns.

Provides a `duplicate.Flag` implementation to determine what to do
with duplicate members.

Provides `WriteCloser` interface for output files with
transparent decompression.

Provides `ReadCloser` interface for input files with
transparent decompression.

Provides `ReadCloser` interfaces to decompress incoming data.

Determines the correct decompression algorithm by reading the file
magic markers in the incoming data.

Provides `WriteCloser` wrappers that compress the written data.

Can determine the compression needed from the file extension _or_
can start a subprocess that performs the compression.

When using `3.1.1` and Bazel `8.0.0rc4` the toolchains do not get registered.

This is due to an upstream [issue] that was resolved with a [PR] to disable the
default registration in this [commit].

To upgrade past `3.1.0`, we will need to register specific toolchains.

[issue]: https://github.com/uber/hermetic_cc_toolchain/issues/181
[pr]: https://github.com/uber/hermetic_cc_toolchain/pull/190
[commit]: https://github.com/uber/hermetic_cc_toolchain/commit/f8c17de30fbf185cc5c2f61b2b508aa3b3d294a1

Includes breaking change to `toolchain_local_select` which
does not affect this module but is a needed updated for Bazel 8

Allows projects to customise the compressor used with toolchains.

This is especially useful with the built toolchains:

```
--extra_toolchains=@rules_zstd//zstd/toolchain/zstd:built
```

Avoids need for C/C++ compilation.