GH-39026: [C++][Python] Add ARROW_HARDENING compiler options

[raulcd]

TBD:

Currently just testing.

Rationale for this change

What changes are included in this PR?

Are these changes tested?

Are there any user-facing changes?

This PR includes breaking changes to public APIs. (If there are any breaking changes to public APIs, please explain which changes are breaking. If not, you can remove this.)

This PR contains a "Critical Fix". (If the changes fix either (a) a security vulnerability, (b) a bug that caused incorrect or invalid data to be produced, or (c) a bug that causes a crash (even when the API contract is upheld), please provide explanation. If not, you can remove this.)

• GitHub Issue: [C++][Packaging] Consider stricter compiler options #39026

[raulcd]

@github-actions crossbow submit wheel-manylinux-2-28-cp314-cp314-amd64

[github-actions]

⚠️ GitHub issue #39026 has been automatically assigned in GitHub to PR creator.

[github-actions]

Revision: 0ea10af

Submitted crossbow builds: ursacomputing/crossbow @ actions-43e3957538

Task	Status
wheel-manylinux-2-28-cp314-cp314-amd64

[raulcd]

@github-actions crossbow submit wheel-linux--cp314-cp314*

[github-actions]

Revision: 0ea10af

Submitted crossbow builds: ursacomputing/crossbow @ actions-5df70e9967

Task	Status
wheel-manylinux-2-28-cp314-cp314-amd64
wheel-manylinux-2-28-cp314-cp314-arm64
wheel-manylinux-2-28-cp314-cp314t-amd64
wheel-manylinux-2-28-cp314-cp314t-arm64
wheel-musllinux-1-2-cp314-cp314-amd64
wheel-musllinux-1-2-cp314-cp314-arm64
wheel-musllinux-1-2-cp314-cp314t-amd64
wheel-musllinux-1-2-cp314-cp314t-arm64

[raulcd]

@ursabot please benchmark

[rok]

Benchmark runs are scheduled for commit d9d991d. Watch https://buildkite.com/apache-arrow and https://conbench.arrow-dev.org for updates. A comment will be posted here when the runs are complete.

[conbench-apache-arrow]

Thanks for your patience. Conbench analyzed the 3 benchmarking runs that have been run so far on PR commit d9d991d.

There were 87 benchmark results indicating a performance regression:

• Pull Request Run on arm64-t4g-2xlarge-linux at 2026-08-18 15:42:33Z
  • ThreadPoolSpawn (C++) with params=threads:2/task_cost:100000/real_time, source=cpp-micro, suite=arrow-thread-pool-benchmark
  • ThreadedTaskGroup (C++) with params=threads:1/task_cost:100000/real_time, source=cpp-micro, suite=arrow-thread-pool-benchmark
• and 85 more (see the report linked below)

The full Conbench report has more details.

[raulcd]

@ursabot please benchmark

[rok]

Benchmark runs are scheduled for commit f293a08. Watch https://buildkite.com/apache-arrow and https://conbench.arrow-dev.org for updates. A comment will be posted here when the runs are complete.

[raulcd]

@ursabot please benchmark

[rok]

Benchmark runs are scheduled for commit 83d61b9. Watch https://buildkite.com/apache-arrow and https://conbench.arrow-dev.org for updates. A comment will be posted here when the runs are complete.

[conbench-apache-arrow]

Thanks for your patience. Conbench analyzed the 3 benchmarking runs that have been run so far on PR commit f293a08.

There were 5 benchmark results indicating a performance regression:

• Pull Request Run on amd64-c6a-4xlarge-linux at 2026-08-19 09:35:52Z
  • BM_UnpackUint64 (C++) with params=Sse42Unaligned/8/64, source=cpp-micro, suite=arrow-bpacking-benchmark
  • RecordBatchSortIndicesInt64Narrow (C++) with params=1048576/100/1, source=cpp-micro, suite=arrow-compute-vector-sort-benchmark
• and 3 more (see the report linked below)

The full Conbench report has more details.

[conbench-apache-arrow]

Thanks for your patience. Conbench analyzed the 3 benchmarking runs that have been run so far on PR commit 83d61b9.

There were 34 benchmark results indicating a performance regression:

• Pull Request Run on arm64-t4g-2xlarge-linux at 2026-08-19 12:00:30Z
  • ThreadPoolSpawn (C++) with params=threads:2/task_cost:100000/real_time, source=cpp-micro, suite=arrow-thread-pool-benchmark
  • ThreadPoolSpawn (C++) with params=threads:2/task_cost:100000/real_time, source=cpp-micro, suite=arrow-thread-pool-benchmark
• and 32 more (see the report linked below)

The full Conbench report has more details.