Calculate HoC without git binary

[vbrandl]

Calculating the HoC using the git2 crate removes the dependency on a git binary in the system. That way we can use a FROM scratch image for the last docker stage and only copy certificates from linuxkit/ca-certificates over to the container.