use Buildkit's new OCI stores feature for image archives

[vito]

• remove image unpack/get-config calls from shim (yay!)
• maintain an OCI content.Store in $XDG_DATA_HOME/bass
• use containerd's new transfer code to import an OCI tar stream into it