Sync main to release-1.7 as much as possible, in prep for #2158

[johnkerl]

I have not up until now backported all main PRs -- since the creation of release-1.7 -- to the release-1.7 branch. In particular, C++-only changes haven't needed backporting.

However, we're about to merge the important #2158 which won't backport cleanly to release-1.7 without C++ prerequisites in place. Hence this catch-up PR.

Note that things that should not be included have not been included: R DESCRIPTION and NEWS.md files, controlled downgrades on .github/workflows/r-ci.yml and .github/workflows/r-python-interop-testing.yml, and core pins in apis/r/tools/get_tarball.R and libtiledbsoma/cmake/Modules/FindTileDB_EP.cmake.

Intentional remaining differences are here:
https://gist.github.com/johnkerl/ea70db9e28134ecae9bba84ea7c2a940

[codecov]

Codecov Report

Merging #2165 (1a13dfb) into release-1.7 (9f4fdbb) will decrease coverage by 0.24%.
Report is 1 commits behind head on release-1.7.
The diff coverage is 50.87%.

Additional details and impacted files

@@               Coverage Diff               @@
##           release-1.7    #2165      +/-   ##
===============================================
- Coverage        71.99%   71.76%   -0.24%     
===============================================
  Files              101      101              
  Lines             7002     6930      -72     
  Branches           209      211       +2     
===============================================
- Hits              5041     4973      -68     
+ Misses            1861     1855       -6     
- Partials           100      102       +2     

Flag	Coverage Δ
libtiledbsoma	66.84% <50.87%> (-0.75%)	⬇️
r	74.68% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
python_api	∅ <ø> (∅)
libtiledbsoma	48.05% <50.87%> (-2.42%)	⬇️