[Distroless]: Support distroless container images

[damondouglas]

Summary

This issue tracks the feature to add distroless support to new and variants of existing Beam container images.

What problem does this solve

Portable runner execution relies on containerization of Beam’s dependencies. These container images harbor several security vulnerabilities. One vector of these vulnerabilities stem from the use of container image bases that provide access to the operating system, which may unnecessarily expose the development environment. For an informative and entertaining discussion on this, see Containers Are Not VMs! Which Base Container (Docker) Images Should We Use?.

Goals

• [Distroless] Support BuildKit and multi-stage container image builds #32816
• [Distroless] Enable Distroless Python SDK (non-ML) based container #32817
• [Distroless] Enable Distroless Java SDK based container images #32818
• [Distroless]: Add Beam ML distroless container images #32822