Add TSan job to sanitizer CI

[MaciejSalwa543]

Description

• Add --config=tsan (built with -O1) to .bazelrc and tsan to the sanitizer CI matrix
• TSan runs as its own job: it cant be combined with ASan/LSan, and TSan+UBSan on GCC 12 gives false data-race reports (ubsan IsAccessibleMemoryRange use of pipe causes tsan false positives google/sanitizers#1106). Both races from the issue were this false positive, so nothing to fix in time_daemon
• Set vm.mmap_rnd_bits=28 in the TSan job and check it took effect, otherwise libtsan aborts on ubuntu-24.04 (ubuntu-latest's vm.mmap_rnd_bits is too high to work with sanitizers actions/runner-images#9515)

The asan_ubsan_lsan leg currently skips all tests on main (removed :sanitizer flag). That's fixed separately in #216.

Related ticket

closes #228

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 78e1e3d5-4767-4178-b818-e78d4f8f2715
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'platforms', the root module requires module version platforms@1.0.0, but got platforms@1.1.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'score_platform', the root module requires module version score_platform@0.7.1, but got score_platform@0.7.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'rules_oci', the root module requires module version rules_oci@2.2.7, but got rules_oci@2.3.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 3 packages loaded
WARNING: Target pattern parsing failed.
ERROR: Skipping '//:license-check': no such target '//:license-check': target 'license-check' not declared in package '' defined by /home/runner/work/time/time/BUILD
ERROR: no such target '//:license-check': target 'license-check' not declared in package '' defined by /home/runner/work/time/time/BUILD
INFO: Elapsed time: 15.033s
INFO: 0 processes.
ERROR: Build did NOT complete successfully
ERROR: Build failed. Not running target