Hardening flags for release mode

[benthevining]

See https://github.com/cpp-best-practices/cmake_template/blob/main/cmake/Hardening.cmake