a56: Makefile: add hardening stuff to CFLAGS