We still need a custom image for `format-check` because `rules_lint` isn't hermetic, but we'll solve that later. Refs: 952fcc30
mentioned in commit ceb07422
mentioned in commit 482e4e01