Handle all -isystem variants in cargo build script path rewriting

Add -stdlib++-isystem, -isystem-after, and -cxx-isystem to the set
of flags whose following path argument gets prefixed with ${pwd}.
These are standard Clang flags for specifying system include paths
that were not handled, causing cargo build scripts to fail in the
sandbox when the CC toolchain uses them.

See the Clang documentation for the full set of isystem-like flags:
https://clang.llvm.org/docs/ClangCommandLineReference.html

Author: Tamas Vajk

cargo/private/cargo_build_script.bzl

@@ -248,8 +248,8 @@ def _pwd_flags_fsanitize_ignorelist(args):
     return _prefix_pwd_to_flag(args, ["-fsanitize-ignorelist="])
 
 def _pwd_flags_isystem(args):
-    """Prefix execroot-relative paths in -isystem and -Xclang -internal-isystem arguments with ${pwd}."""
-    return _prefix_pwd_to_flag(args, ["-isystem", "-internal-isystem"])
+    """Prefix execroot-relative paths in -isystem-like arguments with ${pwd}."""
+    return _prefix_pwd_to_flag(args, ["-isystem", "-isystem-after", "-internal-isystem", "-cxx-isystem", "-stdlib++-isystem"])
 
 def _pwd_flags_L(args):
     """Prefix execroot-relative paths in -L arguments with ${pwd}."""