* RBE: fix sleek-android-lib build under buck2 remote execution Root-caused and fixed a chain of issues blocking sleek-android-lib from building under Buck2 RBE: - third-party/ carries its own reindeer-generated BUCK file, making it a separate buck2 package — a root-level glob() could never see anything under it (not just freeq/vidya, but cpal/egui-winit/egui_glow/ khronos_api too). Moved the non-reindeer-tracked patched forks (vidya, freeq) to a new patched-crates/ dir where glob() works directly; exposed the reindeer-tracked ones via a hand-spliced filegroup target plus an explicit $(location ...) staging step in cargo_genrule (target-typed srcs land at their own buck-out path under repo_relative_root, not the real repo path). - RBE image was missing a C toolchain (build-essential) and pkg'd V4L2 kernel headers too old for v4l2r's stateless-codec structs (VP9/AV1/ H264 decode) — jammy's linux-libc-dev predates them entirely, no newer version exists for that release; pulled in noble's instead. - platforms/defs.bzl now pins the image by digest, not :latest — BuildBuddy RE workers kept serving a stale cached pull even after a fresh push. - bindgen (libclang's low-level parse API, not the clang driver) needs help finding libc headers; split the fix across BINDGEN_EXTRA_CLANG_ARGS (clang resource-dir, scoped to bindgen) and CPATH (glibc sysroot only, compiler-neutral) after CPATH-with-clang's-headers broke GCC's own SSE2 compiles. - ring's C (BoringSSL-derived) predates clang's -Wimplicit-function- declaration flip to a hard error (clang 15+); added -Wno-error=implicit-function-declaration via CFLAGS. - pinned clang/libclang to 17.x (was floating latest = 22, which ships broken pre-release AVX10.2/AMX intrinsic headers). - cargo_genrule now tails its own stdout so real failures aren't replaced by buck2's "Result too large to display" on big builds. Also adds .github/workflows/rbe-image.yml (manual dispatch) to build/push the RBE image via GitHub's faster runners instead of a slow local link. * RBE: fix missing assets/** glob, point at GH Actions-built image digest - cargo.bzl: add assets/** to _srcs() — android/src/app.rs include_bytes!()s the app icon from there; missing for the same reason freeq/vidya were (worked locally via repo_relative_root's real- filesystem bypass, silently absent remotely). Last fix needed to get sleek-android-lib building end-to-end under RBE — verified: real libsleek.so/libsleek.rlib output, genuinely remote-executed. - platforms/defs.bzl: point container-image at the image built by .github/workflows/rbe-image.yml (the amd64 sub-manifest digest, not the top-level OCI index digest docker/build-push-action produces). - README: document the GH Actions rebuild path and the index-vs- sub-manifest digest gotcha.