protobuf-python: restore builds and fuzz DescriptorPool inputs - #15901

Restores the current protobuf-python project build and adds a dedicated Atheris target for serialized descriptor inputs.

Current Protobuf uses Bzlmod and no longer supports the stale --noenable_bzlmod override. This removes that override from the Docker preflight and fuzzer build, and uses a shallow source clone.

The new target creates an isolated DescriptorPool for each input and calls AddSerializedFile. Expected descriptor validation errors are discarded while native crashes and sanitizer findings remain visible. It follows the existing fuzz_*.py discovery convention.

The Bazel wheel build now also propagates the OSS-Fuzz fuzzer-no-link instrumentation into the native extension. This preserves ASan while allowing libFuzzer to receive coverage feedback from the upb parser rather than only from the Python wrapper.

Local Linux x86_64 validation with the OSS-Fuzz helpers:

• project image built successfully against current Protobuf HEAD
• ASan fuzzer build completed all 2,079 Bazel actions
• the CPython abi3 wheel was produced and installed
• both fuzz_protobuf and fuzz_descriptor_pool were packaged successfully
• a 31-second fuzz_descriptor_pool smoke run completed 519,722 executions with no sanitizer finding
• native coverage grew from cov: 421 / ft: 422 to cov: 1437 / ft: 4216, adding 1,695 corpus units