chore(build): bump Bazel from 6.x to 7.x and rules_foreign_cc from 0.9.0 to 0.12.0

[fffonion]

Summary

Some noticable changes:

• Internally bazel7 uses @@label to indicate a globally unique label.
• foreign_cc now uses $$VAR instead of $$VAR$$
• bazel-bin directory under workspace root is only populated after build complete (success or failure) so it's not accessible during build time. So we now use relative path instead (it's still safe as execroot is determinted).
• Two patches of rules_foreign_cc that removes a commit that breaks cross compliation. (Exposing LD make environment variable breaks cross compilation bazel-contrib/rules_foreign_cc#1283 and Symlinking the sub directory should be disabled by default bazel-contrib/rules_foreign_cc#1284)
• Add a new rule to filter only the static library to link.

Checklist

• The Pull Request has tests
• A changelog file has been created under changelog/unreleased/kong or skip-changelog label added on PR if changelog is unnecessary. README.md
• There is a user-facing docs PR against https://github.com/Kong/docs.konghq.com - PUT DOCS PR HERE

Issue reference

KAG-4445

[fffonion]

good matrix run https://github.com/Kong/kong/actions/runs/10804371367/job/29969733683?pr=13603

[team-gateway-bot]

Cherry-pick failed for master, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git remote add upstream https://github.com/kong/kong-ee
git fetch upstream master
git worktree add -d .worktree/cherry-pick-13603-to-master-to-upstream upstream/master
cd .worktree/cherry-pick-13603-to-master-to-upstream
git checkout -b cherry-pick-13603-to-master-to-upstream
ancref=$(git merge-base c498f41dc03f7a04aaf3df24c59e01ff5e39c339 5a07a655fe27faf6a1003183b4dfefac847d56cc)
git cherry-pick -x $ancref..5a07a655fe27faf6a1003183b4dfefac847d56cc

[fffonion]

EE manual cherrypick at https://github.com/Kong/kong-ee/pull/10226