chore: Mitigate bazel-contrib/rules_oci#858 (#690)

Working around bazel-contrib/rules_oci#858.

- Bump rules_oci to latest
- Unset the feature flag
- Tag the defaults as manual so they don't build

### Changes are visible to end-users: no

### Test plan

This is the test plan.

---------

Co-authored-by: aspect-marvin[bot] <[email protected]>

Author: arrdem

.bcr/patches/remove_dev_deps.patch

@@ -1,5 +1,5 @@
---- a/MODULE.bazel	2025-10-28 13:08:11
-+++ b/MODULE.bazel	2025-10-28 13:08:11
+--- a/MODULE.bazel	2025-10-28 13:13:30
++++ b/MODULE.bazel	2025-10-28 13:13:30
 @@ -22,557 +22,5 @@
      "@aspect_rules_py//py/private/toolchain/venv/...",
      "@aspect_rules_py//py/private/toolchain/unpack/...",
@@ -441,7 +441,7 @@
 -########################################
 -# from bazel/include/oci.MODULE.bazel
 -# rules_oci and friends
--bazel_dep(name = "rules_oci", version = "2.0.1", dev_dependency = True)
+-bazel_dep(name = "rules_oci", version = "2.2.6", dev_dependency = True)
 -
 -oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 -oci.pull(

MODULE.bazel

@@ -459,7 +459,7 @@ use_repo(version, "bazel_features_globals", "bazel_features_version")
 ########################################
 # from bazel/include/oci.MODULE.bazel
 # rules_oci and friends
-bazel_dep(name = "rules_oci", version = "2.0.1", dev_dependency = True)
+bazel_dep(name = "rules_oci", version = "2.2.6", dev_dependency = True)
 
 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 oci.pull(

bazel/BUILD.bazel

@@ -10,5 +10,8 @@ bazelrc_preset(
     # USE_BAZEL_VERSION for testing.
     doc_link_template = "https://registry.build/flag/bazel?filter={flag}",
     strict = True,
+    tags = [
+        "manual",
+    ],
     target_compatible_with = incompatible_with("9.0.0"),
 )

bazel/defaults.bazelrc

@@ -209,7 +209,7 @@ common:debug --test_timeout=9999
 # Migration requires setting a toolchain parameter inside ctx.actions.{run, run_shell} for actions which use tool or executable from a toolchain.
 #
 # See https://github.com/bazelbuild/bazel/issues/17134
-common --incompatible_auto_exec_groups
+# common --incompatible_auto_exec_groups
 # Docs: https://registry.build/flag/bazel?filter=incompatible_auto_exec_groups
 
 # Language specific rules (Protos, Java, C++, Android) are being rewritten to Starlark and moved from Bazel into their rules repositories

bazel/include/oci.MODULE.bazel

@@ -1,5 +1,5 @@
 # rules_oci and friends
-bazel_dep(name = "rules_oci", version = "2.0.1", dev_dependency = True)
+bazel_dep(name = "rules_oci", version = "2.2.6", dev_dependency = True)
 
 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 oci.pull(

bazel/rust/defs.bzl

@@ -112,6 +112,7 @@ def rust_library(name, rustc_env_files = [], version_key = "", crate_features =
             "//conditions:default": [
                 "-Ccodegen-units=1",
                 "-Copt-level=3",
+                "-Cstrip=symbols",
             ],
         }),
         crate_features = crate_features + ["bazel"],
@@ -135,11 +136,12 @@ def rust_proc_macro(name, crate_features = [], **kwargs):
                 "-Ccodegen-units=1",
                 "-Copt-level=3",
                 "-Cpanic=abort",
-                "-Cstrip=symbols",
+                "--release",
             ],
             "//conditions:default": [
                 "-Ccodegen-units=1",
                 "-Copt-level=3",
+                "-Cstrip=debuginfo",
             ],
         }),
         crate_features = crate_features + ["bazel"],