Upstreaming container image work

Description

Much of the work done in the Onimages project could be upstreamed, alleviating this codebase while benefiting other projects.

Tasks

• Create ticket: Dockerfile/Containerfile for Arti. Done at tpo/core/arti#1904.
• Upstream code to a CI Template repository. Done here.
• Create tickets/merge requests at tpa/base-images and/or at core/container-images:
  • Asking/implementing a base Rust container, ready for the cargo install, useful for the arti container and other projects (check related task above).
  • Upstreaming as much as possible.
  • Avoiding CI code duplication.