Enforce lockfile update

- Upgraded rules_python to 0.26.0 to include https://github.com/bazelbuild/rules_python/pull/1433
- Updated the lockfile on all supported platforms.
- Enable `--lockfile_mode=update` for regular builds (mostly affecting local build)
- Enable `--lockfile_mode=error` for CI builds to ensure lockfile is up-to-date.

After this change, please make sure to update the lockfile by running `bazel mod deps` whenever you change the MODULE.bazel file or any .bzl file used in it.

Closes #20101.

PiperOrigin-RevId: 580553351
Change-Id: I54c3298e6c23c8392226e1e32ba203689f334226
diff --git a/.bazelrc b/.bazelrc
index d6be9f0..f4e78f8 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -46,7 +46,7 @@
 common:bzlmod --check_direct_dependencies=error
 common:bzlmod --experimental_downloader_config=bazel_downloader.cfg
 common --config=bzlmod
-common --lockfile_mode=off
+common --lockfile_mode=update
 
 # Enable Java 11 language features (https://github.com/bazelbuild/bazel/issues/14592)
 build --java_language_version=11
@@ -67,7 +67,11 @@
 build:docs --workspace_status_command=scripts/docs/get_workspace_status.sh
 
 # Flags for CI builds
+## Common
+common:ci-common --lockfile_mode=error
+
 ## For Linux
+common:ci-linux --config=ci-common
 build:ci-linux --repository_cache=/var/lib/buildkite-agent/bazeltest/repo_cache
 test:ci-linux --test_env=TEST_INSTALL_BASE=/var/lib/buildkite-agent/bazeltest/install_base
 test:ci-linux --test_env=REPOSITORY_CACHE=/var/lib/buildkite-agent/bazeltest/repo_cache
@@ -76,6 +80,7 @@
 test:ci-linux --sandbox_default_allow_network=false
 
 ## For macOS
+common:ci-macos --config=ci-common
 build:ci-macos --repository_cache=/Users/buildkite/bazeltest/repo_cache
 test:ci-macos --test_env=TEST_INSTALL_BASE=/Users/buildkite/bazeltest/install_base
 test:ci-macos --test_env=REPOSITORY_CACHE=/Users/buildkite/bazeltest/repo_cache
@@ -84,6 +89,7 @@
 test:ci-macos --sandbox_default_allow_network=false
 
 ## For Windows
+common:ci-windows --config=ci-common
 build:ci-windows --repository_cache=C:/b/bazeltest_repo_cache
 test:ci-windows --test_env=BAZEL_VC
 test:ci-windows --test_env=JAVA_HOME