fuzz: disable Zend's arena allocator under go-118-fuzz-build

Zend's own arena allocator reuses freed memory in ways that hide bugs
from ASan/MSan; disabling it (USE_ZEND_ALLOC=0) is already required for
the sanitizer CI jobs (.github/workflows/sanitizers.yaml), but that env
var never reaches a libFuzzer binary built by OSS-Fuzz: build.sh runs in
a throwaway build container, and ClusterFuzz later execs the compiled
fuzzer as a fresh process on a different bot with no inherited env. The
libFuzzer .options file can't fill the gap either, since ClusterFuzz
whitelists its [env] section down to two unrelated variables.

Setting it from an init() gated on the "gofuzz" build tag reaches the
process before PHP starts, without touching any non-fuzzing build.

Author: dunglas

zendalloc_gofuzz.go

@@ -0,0 +1,10 @@
+//go:build gofuzz
+
+package frankenphp
+
+import "os"
+
+func init() {
+	// Zend's own arena allocator hides bugs from the sanitizers OSS-Fuzz builds with.
+	os.Setenv("USE_ZEND_ALLOC", "0")
+}