[roll third_party/pigweed] build: Run clang-tidy in default build

- Add the "static_analysis" group that runs clang-tidy to the default
  build.
- Remove the "clang_tidy" presubmit step. Instead, have the
  "static_analysis" step run clang-tidy and python.lint from GN.
- Fix a few clang-tidy warnings.
- Exclude mbedtls headers from checks.

Original-Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/64624

https://pigweed.googlesource.com/pigweed/pigweed
third_party/pigweed Rolled-Commits: eb05d88e81fd317..4cafcda09f52387
Roller-URL: https://ci.chromium.org/b/8833467318167881553
Cq-Cl-Tag: roller-builder:pigweed-experimental-roller
Cq-Cl-Tag: roller-bid:8833467318167881553
CQ-Do-Not-Cancel-Tryjobs: true
Change-Id: I9f928fede7650e42fb75e8a7addb8b65898291d7
Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/experimental/+/65460
Bot-Commit: Pigweed Integration Roller <pigweed-integration-roller@pigweed.google.com.iam.gserviceaccount.com>
Commit-Queue: Pigweed Integration Roller <pigweed-integration-roller@pigweed.google.com.iam.gserviceaccount.com>
diff --git a/third_party/pigweed b/third_party/pigweed
index eb05d88..4cafcda 160000
--- a/third_party/pigweed
+++ b/third_party/pigweed
@@ -1 +1 @@
-Subproject commit eb05d88e81fd317f6bcdf0492f2b5b75ceb5fd70
+Subproject commit 4cafcda09f52387ee03bc37743ad5e5168789b25