chore(build): upgrade Bazel to 9.3.0

[realityforge]

Use Bazel 9.3.0 for local development, CI and release builds. The wrapper and workflows already use the repository's .bazelversion pin.

Regenerate the module lockfile with 9.3.0, which writes format 28 and updates its bundled dependency metadata, including apple_support 2.5.2. The first-party rules_go 0.61.1 and Go 1.26.4 pins are unchanged; no compatibility fixes were needed.

Audited tracked Bazel pins, wrappers, workflows, scripts, documentation and workspace files. There are no nested first-party workspaces or additional version pins.

Local verification

All commands below exited 0 on macOS arm64. Both version commands printed bazel 9.3.0; the full suite passed all 30 test targets, the integration suite passed seven targets (cached from the full run), lint reported 0 issues., and the executable printed braid 0.0.0-dev. The dedicated output directory avoids the shared output directory in the local user configuration. Formatting and subsequent builds produced no further tracked changes; git diff --exit-code also passed after committing.

bazel --version
./bazelw --version
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 run @rules_go//go -- fmt ./...
git diff --exit-code
git --version
git merge-tree --write-tree '--merge-base=HEAD^{tree}' 'HEAD^{tree}' 'HEAD^{tree}'
test ! -d plans
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 test --test_env=PATH //...
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 run @rules_go//go -- vet ./...
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 run @rules_go//go -- run github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.0 run
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 test --test_env=PATH //integration/...
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 build //cmd/braid:braid
bazel --output_base=/tmp/braid-bazel-9-3-0-4487 run //cmd/braid:braid -- version
git diff --exit-code
git diff --cached --check

The pull request CI will verify Linux amd64 quality checks and integration on Windows amd64, Linux arm64, macOS amd64 and macOS arm64 before merge.