Add build configuration for NullAway

ErrorProne and NullAway. These have to go into `annotationProcessorPaths` and will require downstream changes whenever a project uses its own annotation processor.

We're going to introduce a nullaway profile (`-Pnullaway`) to allow opt-in for projects for gradual migration. Once all projects are set up, we can enable nullaway globally.