* chore: rework oci crate to be more composable * feat: image pull is now internally explicit * feat: utilize vfs for assembling oci images * feat: rework oci to preserve permissions via a vfs
* feat: basic kratactl top command * fix: use magic bytes 0xff 0xff in idm to improve reliability