Add Genome Nexus annotation pipeline container

[johnoooh]

Summary

• Add a rebuildable Genome Nexus annotation pipeline container definition for upstream genome-nexus/genome-nexus-annotation-pipeline v1.0.7.
• Build from the pinned upstream release tarball instead of relying on COPY ., so the image can be built from the containers repo context.
• Include required MSK OCI labels and set imageprivacy="False" for GHCR publication after the normal production workflow.

Validation

• docker run --rm -v /private/tmp/mow-containers-genomenexus-annotationpipeline:/repo -w /repo hadolint/hadolint hadolint --config .hadolint.yml containers/genomenexus_annotation-pipeline/1.0.7/Dockerfile
• docker build -t genomenexus_annotation-pipeline:1.0.7-test containers/genomenexus_annotation-pipeline/1.0.7
• docker run --rm genomenexus_annotation-pipeline:1.0.7-test java -jar /genome-nexus-annotation-pipeline/annotationPipeline/target/annotationPipeline.jar annotate -h
• docker image inspect genomenexus_annotation-pipeline:1.0.7-test --format '{{json .Config.Labels}}'

Notes

• Local validation built an arm64 image because it ran on the local host; repository CI should perform the configured multi-architecture builds.

[nikhil]

Looks good!

[johnoooh]

We are waiting for a new version of GN to release this