treewide: update sandboxroot to fedora 40, nix to 24.05

We didn't bump our sandboxroot in a long time, this updates it to fedora
 40
 and updates the nix shell to nixpkgs-24.05. It also bumps rules_oci to
 the current version.

Change-Id: I9ffb6f4dcd1a95be48b52015df987824dbb169f6
Reviewed-on: https://review.monogon.dev/c/monogon/+/3205
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>
diff --git a/third_party/glib/patches/bazel_support.patch b/third_party/glib/patches/bazel_support.patch
index 41d679c..df5b0e6 100644
--- a/third_party/glib/patches/bazel_support.patch
+++ b/third_party/glib/patches/bazel_support.patch
@@ -493,7 +493,7 @@
 +
 +#define HAVE_STRCASECMP 1
 +
-+#define HAVE_STRERROR_R 1
++#undef HAVE_STRERROR_R
 +
 +#define HAVE_STRINGS_H 1
 +
@@ -640,7 +640,7 @@
 +#define STATFS_ARGS 2
 +
 +/* Defined if strerror_r returns char * */
-+#define STRERROR_R_CHAR_P 1
++#undef STRERROR_R_CHAR_P
 +
 +#define THREADS_POSIX 1
 +