[FC-41616] overlay: add patchelf-venv

[Ma27]

This patch adds a --add-rpath-and-shrink option which performs --add-rpath and --shrink-rpath in a single write to not leak space (--add-rpath increases the ELF header size, --shrink-rpath doesn't reduce it when necessary).

See also flyingcircusio/batou_ext#199 & FC-41616.

@flyingcircusio/release-managers

Note: this is a draft until I know whether this has a chance of getting upstreamed. Would still be interested in your opinion on the change itself and the patch in https://github.com/flyingcircusio/patchelf/commit/6ffde887d77275323c81c2e091891251b021abb3.patch

Release process

• Created changelog entry using ./changelog.sh

PR release workflow (internal)

• PR has internal ticket
• internal issue ID (PL-…) part of branch name
• internal issue ID mentioned in PR description text
• ticket is on Platform agile board
• ticket state set to Pull request ready
• if ticket is more urgent than within the next few days, directly contact a member of the Platform team

Design notes

• Provide a feature toggle if the change might need to be adjusted/reverted quickly depending on context. Consider whether the default should be on or off. Example: rate limiting.
• All customer-facing features and (NixOS) options need to be discoverable from documentation. Add or update relevant documentation such that hosted and guided customers can understand it as well.

Security implications

• Security requirements defined? (WHERE)
• Security requirements tested? (EVIDENCE)

[Ma27]

OK no idea how to delete the just a test thingy here, I tried to submit a request against GitHub to make sure the token is still correct while investigating PL-133144.