Vend OCI image to simplify running the CLI

We should have an easy way for customers to install and run the CLI as an OCI image. This lets them avoid installing the JRE and doing other environmental setup.

Proposed requirements:
* The CLI can read inputs from outside the container.
* The CLI can access module repositories that are outside the container

See #270 for work in this direction.