Add all dependencies for Kubernetes worker

Adds Kubelet, CNI plugins, containerd, runc and gVisor using a
pre-baked list of dependencies generated using scripts/gazelle-deps/sh.

This moves all dependencies of gVisor, Kubernetes, runc, etc into the
same 'namespace' of Bazel external repositories, giving us ease of
accessing code as libraries, and benefits when it comes to version
auditing.

The gazelle-deps.sh script is a temporary solution that will be replaced
ASAP, see T725.

This unblocks T486.

This is an alternative to D389.

Test Plan: `bazel build //core:image` runs and picks up the new binaries

X-Origin-Diff: phab/D487
GitOrigin-RevId: a28a25071fa2ae76b272d237ce9af777485065ff
diff --git a/BUILD b/BUILD
index 02013bc..03985a5 100644
--- a/BUILD
+++ b/BUILD
@@ -2,11 +2,7 @@
 load("@io_bazel_rules_go//go:def.bzl", "go_path", "nogo")
 
 # gazelle:prefix git.monogon.dev/source/nexantic.git
-# gazelle:exclude core/generated
-# gazelle:exclude tools.go
 # gazelle:exclude core/cmd/kube-controlplane
-# gazelle:resolve go k8s.io/client-go/tools/clientcmd @kubernetes//staging/src/k8s.io/client-go/tools/clientcmd:go_default_library
-# gazelle:resolve go k8s.io/client-go/tools/clientcmd/api @kubernetes//staging/src/k8s.io/client-go/tools/clientcmd/api:go_default_library
 gazelle(name = "gazelle")
 
 # Shortcut for the Go SDK
@@ -82,8 +78,8 @@
 
 # Shortcut for kubectl when running through bazel run
 # (don't depend on this, it might turn into an env-based PATH shortcut, use
-# //third_party/kubernetes:kubectl instead)
+# @io_k8s_kubernetes//cmd/kubectl instead)
 alias(
     name = "kubectl",
-    actual = "//third_party/kubernetes:kubectl",
+    actual = "@io_k8s_kubernetes//cmd/kubectl:kubectl",
 )