Enforce strict dependency checking in bazel

https://bazel.build/docs/bazel-and-cpp#toolchain-features

This avoids cases like
#788 fixing
#771 by enforcing
stricter rules to match the behavior of the internal build system.

Bug: b/377996634

Author: Databean

base/cvd/.bazelrc

@@ -1 +1,2 @@
 build --copt=-fdiagnostics-color=always
+build --repo_env=CC=clang

base/cvd/MODULE.bazel

@@ -11,6 +11,7 @@ bazel_dep(name = "fmt", version = "10.2.1")
 bazel_dep(name = "gflags", version = "2.2.2")
 bazel_dep(name = "googletest", version = "1.14.0")
 bazel_dep(name = "jsoncpp", version = "1.9.5")
+bazel_dep(name = "protobuf", version = "21.7")
 bazel_dep(name = "tinyxml2", version = "10.0.0")
 bazel_dep(name = "zlib", version = "1.3.1")