Fix CI

[thii]

• Use Bazel rolling as the default, latest rules_apple requires this.
• Disable --incompatible_unambiguous_label_stringification in tests
• Add missing testonly = True attribute
• Disable testing on BazelCI, this is already covered by GitHub Actions anyways.

[thii]

@keith Can you update the repo settings about required status checks? I renamed the following pipelines:

macos_latest -> macos_rolling macos_latest_head_deps -> macos_rolling_head_deps

[thii]

Renaming in another PR: https://github.com/bazelbuild/tulsi/pull/376