OCI annotation

Annotations suitable for use on OCI container images and other OCI artifacts.

OCI annotations use reverse domain name notation with dots as separators, unlike Kubernetes labels which use a slash between the prefix and name.