Can we simplify FIPS compatibility?

[joshuatcasey]

• Do we need separate FIPS and non-FIPS compilations?
• Can we use Paketo to gain any benefit?
• Can we use GOEXPERIMENT=boringcrypto instead of our custom build tag fips_strict? (https://github.com/golang/go/blob/master/src/crypto/tls/boring.go)
• Can we simplify our Dockerfile_fips to look more like Dockerfile?
• Do we even need fips_strict build tag?