clang/tools: Use python distributed versions

[phlax]

This massively reduces the overhead for running the clang tooling

In this PR only clang-format is hooked up to the format precheck, but we can use the clang-tidy install when bringing it back

Ideally we would be able to do the same with lcov and friends which would reduce the cost of running coverage, but i dont see a package for them

We may decide in the future to fetch these tools from a different channel - the one in this PR is not ideal although it meets our current needs

Commit Message:
Additional Description:
Risk Level:
Testing:
Docs Changes:
Release Notes:
Platform Specific Features:
[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]

[repokitteh-read-only]

CC @envoyproxy/dependency-shepherds: Your approval is needed for changes made to (bazel/.*repos.*\.bzl)|(bazel/dependency_imports\.bzl)|(api/bazel/.*\.bzl)|(.*/requirements\.txt)|(.*\.patch).
envoyproxy/dependency-shepherds assignee is @mattklein123

🐱

Caused by: #29455 was opened by phlax.

see: more, trace.

[keith]

nice

[phlax]

not sure why but this has terrible performance - possibly using the entry_point - ill debug further

[phlax]

hmm - yep the python wrapper seems to add 200ms per call and theres a lot of calls

$ time bazel run //tools/code_format:py-clang-format "${PWD}/source/extensions/http/cache/simple_http_cache/simple_http_cache.cc"
real    0m0.360s
user    0m0.239s
sys     0m0.035s

$ time bazel run //tools/code_format:clang-format "${PWD}/source/extensions/http/cache/simple_http_cache/simple_http_cache.cc"
real    0m0.091s
user    0m0.006s
sys     0m0.018s

[phlax]

committing the binary from the python package directly to the repo and using that and ci runs at usual speed

[phlax]

... as does adding a bazel rule to fish the binary out of the python package