Add shimpei to inject runc prestart hooks

[arnaldo2792]

Issue number:
N / A

Description of changes:
Related to #1799 , that PR is quite big. I'm taking some of the commits in that PR as their individual PR.

 sources: add shimpei

 shimpei is an OCI shim wrapper around `oci-add-hooks`, whose sole
 porpuse is to call `oci-add-hooks` with additional parameters that can't
 be provided by containerd.

packages: add oci-add-hooks

oci-add-hooks is built as part of the release package, but it isn't included in any variant. Instead, packages that depend on it will include it in their spec file, as follows:

Requires: %{_cross_os}oci-add-hooks

Testing done:
In the new variant created in #1799:

I created a new containerd configuration that calls shimpei instead of runc:

[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.nvidia.options]
SystemdCgroup = true
BinaryName = "nvidia-oci" # this is a symlink to `shimpei`, used to figure out the `hooks.json` file 

The prestart hook in #1799, sets up GPUs and mounts helper binaries like nvidia-smi. In my test, I called nvidia-smi in a GPU-enabled orchestrated container:

kubectl exec -it nvidia-device-plugin-daemonset-4q2zf -n kube-system -- /bin/bash
root@nvidia-device-plugin-daemonset-4q2zf:/# nvidia-smi
Mon Dec 13 20:33:53 2021
+-----------------------------------------------------------------------------+
| NVIDIA-SMI 470.57.02    Driver Version: 470.57.02    CUDA Version: N/A      |
|-------------------------------+----------------------+----------------------+
| GPU  Name        Persistence-M| Bus-Id        Disp.A | Volatile Uncorr. ECC |
| Fan  Temp  Perf  Pwr:Usage/Cap|         Memory-Usage | GPU-Util  Compute M. |
|                               |                      |               MIG M. |
|===============================+======================+======================|
|   0  Tesla V100-SXM2...  Off  | 00000000:00:1E.0 Off |                    0 |
| N/A   29C    P0    24W / 300W |      0MiB / 16160MiB |      0%      Default |
|                               |                      |                  N/A |
+-------------------------------+----------------------+----------------------+

+-----------------------------------------------------------------------------+
| Processes:                                                                  |
|  GPU   GI   CI        PID   Type   Process name                  GPU Memory |
|        ID   ID                                                   Usage      |
|=============================================================================|
|  No running processes found                                                 |
+-----------------------------------------------------------------------------+

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[bcressey]

I expect this will build successfully once the files are uploaded to the lookaside cache.

[arnaldo2792]

Forced push includes:

• Add comment explaining why oci-add-hooks is in release/Cargo.toml
• Nits in shimpei's messages

I also updated the lookaside cache