Compiler wrapper to enable security hardening flags

 Replaces gcc, g++, and ld with wrapper scripts that set security hardening
 compilation flags, as an alternative to changing gcc specs. Enabled when
 DEB_BUILD_HARDENING=1 is set.