Allow enabling LSAN for builds
Currently LSAN is explicitly deactivated via ASAN_OPTIONS.
That is a reasonable default since many projects have preexisting leaks.
However for project that are currently leak-free we want to enforce keeping it that way.
Add an option that allows projects to opt into LSAN