treewide: update sandboxroot to fedora 40, nix to 24.05

We didn't bump our sandboxroot in a long time, this updates it to fedora
 40
 and updates the nix shell to nixpkgs-24.05. It also bumps rules_oci to
 the current version.

Change-Id: I9ffb6f4dcd1a95be48b52015df987824dbb169f6
Reviewed-on: https://review.monogon.dev/c/monogon/+/3205
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>
diff --git a/third_party/qemu/patches/standard-headers-removal.patch b/third_party/qemu/patches/standard-headers-removal.patch
new file mode 100644
index 0000000..092a643
--- /dev/null
+++ b/third_party/qemu/patches/standard-headers-removal.patch
@@ -0,0 +1,26 @@
+From f0e030f8b33df2009d233ffda00def50b30c8ca6 Mon Sep 17 00:00:00 2001
+From: Tim Windelschmidt <tim@monogon.tech>
+Date: Thu, 11 Jul 2024 16:21:48 +0200
+Subject: [PATCH] remove includes of "standard-headers"
+
+We ship these ourselves and qemu uses old ones
+---
+ hw/virtio/vhost-backend.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/hw/virtio/vhost-backend.c b/hw/virtio/vhost-backend.c
+index 222bbcc62d..8f495ad374 100644
+--- a/hw/virtio/vhost-backend.c
++++ b/hw/virtio/vhost-backend.c
+@@ -13,7 +13,7 @@
+ #include "hw/virtio/vhost-backend.h"
+ #include "qemu/error-report.h"
+ #include "qemu/main-loop.h"
+-#include "standard-headers/linux/vhost_types.h"
++#include <linux/vhost_types.h>
+
+ #include "hw/virtio/vhost-vdpa.h"
+ #ifdef CONFIG_VHOST_KERNEL
+--
+2.44.1
+