include system-probe in the build

[joshrwolf]

this turned into a large PR, in general I assumed the existing package is wrong/broken, so I took quite a bit of liberty in restructuring things. the highlights of this change are:

• bundles the system-probe component in the multicall agent
  • this uses kernel headers from debian stable 5.10.216-1~deb10u1 (to match what upstream is doing)
• fixes the CGO impl by using the correct include paths
• fixes the rtloader integration by using the correct --embedded-path
  • fixes the RPATH used by the agent to call the appropriate rtloader headers
• creates a new datadog-agent-core-integrations subpackage that includes all the python plugin check integrations
  • installed using the py3.11 venv approach
  • pulls in a patch from upstream to simplify the discovery of checks
• better matches the directory structure to upstream, including a few key hardcoded paths
  • place multicall symlinks to /opt/datadog-agent/embedded where the entrypoints are expecting
• embed the jmx integration in the multicall, but separate the runtime dependency on openjdk as a separate package, included at image build time
• downgrade go (1.21) and python (3.11) to match upstreams dependency locks

there's a lot of changes at once here, for some additional confidence, this has been tested (in its image form) against the standard docker and fargate setup

[xnox]

Looks good, minor comments to simplify things potentially.

[smoser]

lgtm.

[joshrwolf]

going to land this as is to kick off a HEAD build, will address the nits in a follow up