Mark OCI container targets as Linux-only

The oci_load and multirun targets in images/ were missing
target_compatible_with constraints, causing toolchain resolution
failures on Windows (both x64 and ARM64). The oci_image target already
had the Linux constraint but the load/multirun targets that depend on
it did not.

Made-with: Cursor

Author: threepointone

images/BUILD.bazel

@@ -9,11 +9,17 @@ IMAGES = {
     command(
         name = name,
         command = target,
+        target_compatible_with = [
+            "@platforms//os:linux",
+        ],
     )
     for (name, target) in IMAGES.items()
 ]
 
 multirun(
     name = "load_all",
     commands = IMAGES.keys(),
+    target_compatible_with = [
+        "@platforms//os:linux",
+    ],
 )

images/container-client-test/BUILD.bazel

@@ -37,12 +37,18 @@ oci_load(
     name = "load",
     image = ":image",
     repo_tags = ["cloudflare/workerd/container-client-test:latest"],
+    target_compatible_with = [
+        "@platforms//os:linux",
+    ],
     visibility = ["//visibility:public"],
 )
 
 oci_load(
     name = "load-proxy-everything",
     image = "@proxy_everything",
     repo_tags = ["cloudflare/proxy-everything:main"],
+    target_compatible_with = [
+        "@platforms//os:linux",
+    ],
     visibility = ["//visibility:public"],
 )