[3.11] gh-87474: Fix file descriptor leaks in subprocess.Popen (GH-96351) (#104563)

[3.11] gh-87474: Fix file descriptor leaks in subprocess.Popen (GH-96351) (#104563)

gh-87474: Fix file descriptor leaks in subprocess.Popen (GH-96351)

This fixes several ways file descriptors could be leaked from `subprocess.Popen` constructor during error conditions by opening them later and using a context manager "fds to close" registration scheme to ensure they get closed before returning.

---------

(cherry picked from commit 3a4c44bb1e92802db64deec59cf8a68ad3973219)

Co-authored-by: cptpcrd <31829097+cptpcrd@users.noreply.github.com>
Co-authored-by: Gregory P. Smith [Google] <greg@krypto.org>