Build the insecure flavour of Oak Functions container

[andrisaar]

This is similar to what we have with the Restricted Kernel version, except a little bit more complicated as we need a whole second container.

(I considered bundling both binaries into one container, but decided against it as we want the choice be explicit.)

Ref b/331866772