Should be able to filter copts and linkerflags for make, configure_make etc.

Currently it appears that foreign_cc is getting compiler and linker flags from the toolchain. While this may be preferable in some circumstances, it will not always work. For example, a `zlib` build defines `-D_FORTIFY_SOURCE=...`, which means that if you want to us `zlib` in your project, you must define the same fortify-source option, or not define anything -- limiting the use of this feature.

There are many such circumstances like this. For example, we may want `-Werror` for our own code, but turn this option off for foreign dependencies! Real world examples are kinda endless.

At the very least, foreign_cc needs `nocopt` for each of its rule types.

Start by locating the foreign_cc rule entry points for make, configure_make, and the other rule types, then trace how compiler and linker flags come from the toolchain. Review existing flag-related options and determine the scope needed for per-rule nocopt and linker-flag filtering. Done means the supported rule types can exclude unwanted toolchain flags without affecting the project's own compilation flags.

Written by the indexing model from the issue text.