rkt enter in the recursive make layout

the last commit is the real substance here, and assumes a locking interface exists similar to the gc PR.

demonstrates what adding functionality to stage1 is like now vs. simply inlining in mkrootfs.sh