cat: refactor stdio handling

[xtqqczze]

Introduce safe wrappers for raw stdio backed by ManuallyDrop<File>. The ManuallyDrop prevents the file descriptor from being closed on drop, which could otherwise lead to undefined behavior.

The wrapper only exposes &File from StdinRaw, so safe code cannot take ownership and accidentally drop the underlying descriptor.

[github-actions]

GNU testsuite comparison:

GNU test failed: tests/timeout/timeout-group. tests/timeout/timeout-group is passing on 'main'. Maybe you have to rebase?
Skip an intermittent issue tests/rm/isatty (fails in this run but passes in the 'main' branch)
Skip an intermittent issue tests/tail/tail-n0f (fails in this run but passes in the 'main' branch)
Skipping an intermittent issue tests/date/date-locale-hour (passes in this run but fails in the 'main' branch)
Congrats! The gnu test tests/printf/printf-surprise is now passing!

[oech3]

It is logically possible to drop() wrapped safe code by enduser of uucore.
I surely need BorrowedFile...

[codspeed-hq]

Merging this PR will not alter performance

✅ 317 untouched benchmarks
⏩ 46 skipped benchmarks¹

---

_{Comparing xtqqczze:dd-stdin-raw (4df6629) with main (0c21cb9)}

Footnotes

1. 46 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[xtqqczze]

Suggested change

	let fd = unsafe { rustix::stdio::take_stdout() };
	let fd = unsafe { OwnedFd::from_raw_fd(libc::STDOUT_FILENO as RawFd) }

We could avoid the rustix dependency here if so desired.