[WIP] building: check dynamic library dependencies are sane using ldd in

[jschaul]

compile and docker building phase.

port ldd script over from hegemony and check for shared library in dynamic executable in build phase

In the past, we checked that binaries have no missing dependencies at deploy time. This could happen when adding a compile-time dependency in dockerfiles for builder and prebuilder but forgetting the runtime in the dockerfile for the end container. This now does this check

• [x] at build time during compilation, though usually compilation would fail, so this is perhaps not so useful
• [ ] TODO at runtime-container build time

(rather than at deploy time. The earlier the better)

(see also https://github.com/zinfra/cailleach/pull/1317)

Checklist

• [x] The PR Title explains the impact of the change.
• [x] The PR description provides context as to why the change should occur and what the code contributes to that effect. This could also be a link to a JIRA ticket or a Github issue, if there is one.
  • [x] A file with the changelog entry in one or more suitable sub-sections. The sub-sections are marked by directories inside changelog.d.