[Build] Upgrade rules_apple/apple_support and set macOS toolchain flags for Bazel 7

[andrew-anyscale]

gRPC's grpc_deps() pulls in rules_apple 1.1.3 which uses
apple_common.multi_arch_split, removed in Bazel 7. Override to 3.2.1
(compatible with Bazel 6/7/8) before grpc_deps() runs so the maybe()
call is a no-op.

rules_apple 3.2.1 requires apple_support >= 1.11.1. Patch
is_xcode_at_least_version to return False instead of fail() on
CLT-only CI machines where xcode_config.xcode_version() is None.

Set BAZEL_NO_APPLE_CPP_TOOLCHAIN=1 to skip apple_cc_toolchain on
CLT-only machines where it would fail with "Xcode version must be
specified". Override -mmacosx-version-min to 12.0 to satisfy
std::filesystem and std::variant requirements (generic toolchain
defaults to 10.11).

Topic: macos-apple-toolchain-bazel7
Relative: protobuf-bazel7-exec-tools
Signed-off-by: andrew andrew@anyscale.com

[andrew-anyscale]

Reviews in this chain:
└#61694 [Build] Patch protobuf for Bazel 7 exec_tools removal
　└#61695 [Build] Upgrade rules_apple/apple_support and set macOS toolchain flags for Bazel 7
　　└#61601 [Build] Upgrade Bazel from 6.5.0 to 7.5.0
　　　└#61725 [Build] Upgrade protobuf 28.2, absl 20240722.0, grpc 1.68.2, boringssl

[andrew-anyscale]

#	head	base	diff	date	summary
0	a8f15f83	6b48a596	diff	Mar 12 12:49 PM	2 files changed, 37 insertions(+)
1	899eb2e7	6b48a596	diff	Mar 12 12:55 PM	1 file changed, 18 insertions(+)
2	abcb022d	ef49837f	rebase	Mar 12 13:08 PM	0 files changed
3	e74b48dc	1030fdc7	diff	Mar 12 20:31 PM	0 files changed
4	5114f871	a99eab44	rebase	Mar 13 11:13 AM	0 files changed
5	4b753789	4134a22f	rebase	Mar 13 14:43 PM	0 files changed
6	bc015e04	e5f8806e	rebase	Mar 13 17:26 PM	0 files changed
7	8883f3c3	ca0a3175	rebase	Mar 13 17:27 PM	0 files changed
8	23fb31c7	871d61ed	rebase	Mar 16 7:15 AM	0 files changed

[gemini-code-assist]

Code Review

This pull request upgrades rules_apple and apple_support to versions compatible with Bazel 7, and includes a patch to handle environments with only Xcode Command Line Tools installed. The changes are well-explained and appear correct. I've suggested a minor improvement for maintainability by using constants for versions and hashes in ray_deps_setup.bzl.