Try to fix Bazel 9 Kythe (#11307)

This should fix these errors:

```
RROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk21_win_arm64_toolchain_config_repo/BUILD.bazel:12:6: errors encountered resolving select() keys for @@rules_java++toolchains+remotejdk21_win_arm64_toolchain_config_repo//:version_or_prefix_version_setting
ERROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk25_win_toolchain_config_repo/BUILD.bazel:7:15: every rule of type config_setting implicitly depends upon the target '@@+local_repository+kythe_release//:extract_kzip_java', but this target could not be found because of: no such target '@@+local_repository+kythe_release//:extract_kzip_java': target 'extract_kzip_java' not declared in package '' defined by /root/workspace/output-base/external/+local_repository+kythe_release/BUILD
ERROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk21_linux_riscv64_toolchain_config_repo/BUILD.bazel:12:6: errors encountered resolving select() keys for @@rules_java++toolchains+remotejdk21_linux_riscv64_toolchain_config_repo//:version_or_prefix_version_setting
ERROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk25_linux_toolchain_config_repo/BUILD.bazel:7:15: every rule of type config_setting implicitly depends upon the target '@@+local_repository+kythe_release//:extract_kzip_typescript', but this target could not be found because of: no such target '@@+local_repository+kythe_release//:extract_kzip_typescript': target 'extract_kzip_typescript' not declared in package '' defined by /root/workspace/output-base/external/+local_repository+kythe_release/BUILD
ERROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk25_macos_toolchain_config_repo/BUILD.bazel:12:6: errors encountered resolving select() keys for @@rules_java++toolchains+remotejdk25_macos_toolchain_config_repo//:version_or_prefix_version_setting
ERROR: /root/workspace/output-base/external/rules_java++toolchains+remotejdk25_linux_toolchain_config_repo/BUILD.bazel:12:6: errors encountered resolving select() keys for @@rules_java++toolchains+remotejdk25_linux_toolchain_config_repo//:version_or_prefix_version_setting
ERROR: /root/workspace/repo-root/tools/expand_secrets/BUILD:16:10: Analysis failed
```
But there's still a lot of other errors

Author: tyler-french

enterprise/server/workflow/config/config.go

@@ -235,6 +235,11 @@ fi
 # These arguments make the extractors run on java generated code
 KYTHE_ARGS="$KYTHE_ARGS --experimental_extra_action_top_level_only=false --experimental_extra_action_filter=^//"
 
+# Bazel 9 defaults config_setting visibility to private, which breaks selects
+if [ $BZL_MAJOR_VERSION -ge 9 ]; then
+    KYTHE_ARGS="$KYTHE_ARGS --incompatible_config_setting_private_default_visibility=false"
+fi
+
 echo "Found Bazel major version: $BZL_MAJOR_VERSION, with enable_bzlmod: $BZLMOD_ENABLED"
 bazel --bazelrc="$KYTHE_DIR"/extractors.bazelrc build $KYTHE_ARGS %s //...`, dirName, bazelConfigFlags)