feat(go_repository): add visibility restrictions to go_repository rules

[tyler-french]

There are certain go_repository rules (or go_deps.gazelle_override)s that should have a limited visibility within our repo.

It would be very helpful to be able to apply a visibility to the rule, and have gazelle change the visibility for the internal BUILD files to restrict these packages from being used in other directories.

However, the packages would still need to be visible to other external rules.