Specify /CETCOMPAT in Bazel Windows build (#1164)

Win32 x64/x86 executables built with GYP are already declared to be
Intel CET compatible (#835).

With this commit those executables built with Bazel also become Intel
CET compatible.

Closes #1111 

PiperOrigin-RevId: 718229248

src/build_defs.bzl

@@ -340,6 +340,11 @@ def mozc_win32_cc_prod_binary(
         "/DEBUG:FULL",
         "/PDBALTPATH:%_PDB%",
     ])
+
+    # '/CETCOMPAT' is available only on x86/x64 architectures.
+    if cpu in ["@platforms//cpu:x86_32", "@platforms//cpu:x86_64"]:
+        modified_linkopts.append("/CETCOMPAT")
+
     mozc_cc_binary(
         name = intermediate_name,
         srcs = srcs,