Package wst-poc-cli as a docker image

[j-mueller]

Use nix to build a docker image that contains just the wst-poc-cli executable. Ideally statically linked to keep the image size small.

[choener]

There is an initial system that builds oci images. I still have to actually try the image.
Images are fairly small, but the build infrastructure is convoluted.