test: validate that all tools invoked by Renovate's `exec` are included in the base image

[jamietanna]

Related to #43882, it would be useful if we could handle this automagically, determining that an invoked tool is not listed in the base image's known binaries, when running in binarySource=global