Bazel builds kept getting OOM-killed on a CI runner whose config promised 25 CPUs it did not have. How hard cgroup caps and three days of retuning settled the m