Add TSan job to sanitizer CI

[MaciejSalwa543]

Description

• Add --config=tsan (built with -O1) to .bazelrc and tsan to the sanitizer CI matrix
• TSan runs as its own job: it cant be combined with ASan/LSan, and TSan+UBSan on GCC 12 gives false data-race reports (ubsan IsAccessibleMemoryRange use of pipe causes tsan false positives google/sanitizers#1106). Both races from the issue were this false positive, so nothing to fix in time_daemon
• Set vm.mmap_rnd_bits=28 in the TSan job and check it took effect, otherwise libtsan aborts on ubuntu-24.04 (ubuntu-latest's vm.mmap_rnd_bits is too high to work with sanitizers actions/runner-images#9515)

The asan_ubsan_lsan leg currently skips all tests on main (removed :sanitizer flag). That's fixed separately in #216.

Related ticket

closes #228

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 3b16373d-24e1-46ee-894c-5747d52e7d6e
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'platforms', the root module requires module version platforms@1.0.0, but got platforms@1.1.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'score_platform', the root module requires module version score_platform@0.7.1, but got score_platform@0.7.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'rules_oci', the root module requires module version rules_oci@2.2.7, but got rules_oci@2.3.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'score_devcontainer', the root module requires module version score_devcontainer@1.8.0, but got score_devcontainer@1.11.1 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 3 packages loaded
WARNING: Target pattern parsing failed.
ERROR: Skipping '//:license-check': no such target '//:license-check': target 'license-check' not declared in package '' defined by /home/runner/work/time/time/BUILD
ERROR: no such target '//:license-check': target 'license-check' not declared in package '' defined by /home/runner/work/time/time/BUILD
INFO: Elapsed time: 15.082s
INFO: 0 processes.
ERROR: Build did NOT complete successfully
ERROR: Build failed. Not running target

[github-actions]

Quality pack traceability report for this pull request:

Status: PASS (workflow run)

Traceability gate input: /home/runner/work/time/time/_build/metrics.json
------------------------------------------------------------------------
[comp_req]
  Requirements with source links: 8/58 (13.79%)
  Requirements with test links:   5/58 (8.62%)
  Requirements fully linked:      5/58 (8.62%)
  Tests linked to requirements:   8/393 (2.04%)
  Broken test references:         0
------------------------------------------------------------------------
Threshold check passed.

[NEOatNHNG]

@MaciejSalwa543 Can you please update your PR to the latest main?

[github-actions]

Documentation preview for this pull request is available at:
pr-233: https://eclipse-score.github.io/time/pr-233/