oak

Restore just bazel-lockfile-all

Add checks to prevent non-functional embedding use + add tests.

Allow rlimits to be config

Convert crate analyis from Python to Rust

Add missing include for oak_session/tls