C++ linker and sysroot paths are not rewritten by Bazel path mapping
This issue describes a problem where Bazel's path mapping for hermetic C++ toolchains is not correctly applied to arguments passed to `rustc`. Specifically, the C++ linker path and sysroot paths are passed as analysis-time strings, which Bazel cannot rewrite. This leads to Rust linking failures when the toolchain is a Bazel artifact, as the sandbox environment uses a different path layout.