more broken bazel build

MODULE.bazel

@@ -1,3 +1,5 @@
+load("@rules_oci//oci:pull.bzl", "oci_pull")
+
 module(
     name = "obsidian-markdown",
     repo_name = "code.ndumas.com_ndumas_obsidian-markdown",
@@ -10,3 +12,11 @@ bazel_dep(name = "rules_pkg", version = "0.9.1")
 
 go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
 go_deps.from_file(go_mod = "//:go.mod")
+
+
+oci_pull(
+    name = "distroless_base",
+    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
+    image = "gcr.io/distroless/base",
+    platforms = ["linux/amd64","linux/arm64"],
+)

cmd/demo/BUILD.bazel

@@ -17,7 +17,6 @@ go_binary(
     visibility = ["//visibility:public"],
 )
 
-
 load("@rules_pkg//:pkg.bzl", "pkg_tar")
 
 pkg_tar(
@@ -34,7 +33,7 @@ oci_image(
         "@platforms//cpu:x86_64": "amd64",
     }),
     base = ":distroless_base",
-    tars = [":tar"],
     entrypoint = ["/app"],
     os = "linux",
+    tars = [":tar"],
 )

cmd/demo/MODULE.bazel

@@ -1,8 +0,0 @@
-load("@rules_oci//oci:pull.bzl", "oci_pull")
-
-oci_pull(
-    name = "distroless_base",
-    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
-    image = "gcr.io/distroless/base",
-    platforms = ["linux/amd64","linux/arm64"],
-)