Double down on all hermetic tooling should be provided in `tools`.

`rules_coreutils` should be the ruleset that provides hermetic coreutils,
not `rules_download`.

Users should only pay for what they use and if they never use core utilities,
we download it everytime.