Support `--incompatible_auto_exec_groups`

[arrdem]

bazelbuild/bazel#17134

oci/private/image.bzl:114 and some other invocations likely need to set the toolchain= parameter to non-None.

This flag is set in https://github.com/bazel-contrib/bazelrc-preset.bzl as of 8+.

[pauldraper]

Example error:

Traceback (most recent call last):
	File "...bazel-out/external/rules_oci+/oci/private/load.bzl", line 189, column 20, in _load_impl
		ctx.actions.run(
Error in run: Couldn't identify if tools are from implicit dependencies or a toolchain. Please set the toolchain parameter. If you're not using a toolchain, set it to 'None'.