Add static rm binary

[lukedirtwalker]

In some environments, .e.g. distroless images rm might not be available, it would be helpful if docker-caps would ship a self-destroying rm binary.
RUN ["/bin/rm", "/bin/setcap"] would delete /bin/setcap and then delete /bin/rm