Introduce new project: istio/ztunnel (#9343)

This is an extension of the existing Istio project. However, because the
code is in a different language, we need a standalone project.

The build.sh will fail if there are no files currently, which is due to
no fuzzers implemented yet. I have a PR into istio/ztunnel to add our
first fuzzer, at which point this should be ready.

projects/istio-ztunnel/Dockerfile

@@ -0,0 +1,28 @@
+# Copyright 2023 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+FROM gcr.io/oss-fuzz-base/base-builder-rust
+RUN apt-get --yes update \
+   && apt-get install --no-install-recommends --yes \
+   librust-clang-sys-dev \
+   protobuf-compiler \
+   libprotobuf-dev \
+   && apt-get clean \
+   && rm --recursive --force /var/lib/apt/lists/*
+
+RUN git clone --depth 1 https://github.com/istio/ztunnel
+COPY build.sh $SRC/
+WORKDIR $SRC/ztunnel

projects/istio-ztunnel/build.sh

@@ -0,0 +1,24 @@
+#!/bin/bash -eu
+# Copyright 2023 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+cargo fuzz build --release --debug-assertions
+FUZZ_TARGET_OUTPUT_DIR=out/rust/x86_64-unknown-linux-gnu/release
+for f in fuzz/fuzz_targets/*.rs
+do
+    FUZZ_TARGET_NAME=$(basename ${f%.*})
+    cp $FUZZ_TARGET_OUTPUT_DIR/$FUZZ_TARGET_NAME $OUT/
+done

projects/istio-ztunnel/project.yaml

@@ -0,0 +1,12 @@
+homepage: "https://github.com/istio/ztunnel"
+main_repo: 'https://github.com/istio/ztunnel'
+primary_contact: "istio-security-vulnerability-reports@googlegroups.com"
+auto_ccs :
+  - "adam@adalogics.com"
+  - "howardjohn@google.com"
+  - "gregory.hanson@solo.io"
+language: rust
+fuzzing_engines:
+  - libfuzzer
+sanitizers:
+  - address