Remote execution images too hard to customize

[aaronmondal]

The only remote execution image currently provided is the default image which we use for the tests and pin in rbe/default/config/BUILD.

The default image includes openssl because the examples require it. This is not ideal. Since all the toolchain and container auto generation can be difficult to grasp we should provide a straightforward, documented way to customize it.