Draft: sys/ztimer: gaurd against spurious ISR

[Enoch247]

Contribution description

This patch changes ztimer_handler() to properly deal with spurious ISRs. Without the patch, a spurious ISR will potentially cause mutliple timers to fire early. With this patch, these ISRs are properly ignored.

The downside of this PR is that it increases the overhead of the ztimer ISR execution. One option would be to only enable it when DEVELHELP is set. Another option is to make this the default behavior, but revert to the old behavior for MCU's where the periph_timer is well tested and known the never cause spurious ISRs. This would ease porting of new MCUs where the timer driver may not be as mature yet.

Testing procedure

Testing procedure is the same as #20924.

Issues/PRs references

• This PR can be used instead of, or together with sys/ztimer: fix re-scheduling of timers #20924.
• cpu/stm32/periph/timer: prevent spurious IRQs #20926 is a good example of how an implementation of periph_timer could lead to spurious ISRs, and it is only one implementation. It is likely that such errors could exist in other drivers.

[Enoch247]

I am marking this as draft because of the potential performance impact. I need to quantify it. If it is not small, this feature should be made optional. I have had some hints in using this code that the performance impact may not be acceptable as a general solution to all users.