GoogleContainerTools
consistently use {lang, debug} x {root, nonroot} x {debian flavor} x {arch}
The rules are somewhat inconsistent about whether/how they publish nonroot images (better about debug, but I think there is interest in dropping busybox).
This issue is about making the repo a bit more consistent about producing both root and nonroot images, which would also enable us to be more consistent about how we produce those.
For example, in python3 instead of building our own nonroot, we could simply layer on top of the //cc nonroot variety (which didn't exist until I just added it: https://github.com/GoogleContainerTools/distroless/blob/45167136864447c99736f1d3133db4c48f7dc4ed/experimental/python3/BUILD#L75-L90
On the topic of consistency here, it would also be good to TEST all of the variants we're producing wherever we can.
I think it's natural to have {arch} as the last suffix. Updated the title.
