Fetch go_repositories using importpath, sum, and version
Fetch go_repositories using importpath, sum, and version

...except for go-containerregistry, which vendors its deps and so
doesn't seem to work with go_repository with sum+version. Instead, fetch
that dependency using a GitHub archive.

bazelbuild/rules_docker,bazelbuild/rules_docker,bazelbuild/rules_docker,bazelbuild/rules_docker