Change default DSO symbol visibility to hidden on Linux

This makes shared-library symbol visibility on Linux match our Windows
builds more closely, hopefully will help prevent missing "FOO_API"
declarations in the future.

This change can probably be enabled on Mac too, I just don't have one
available to test with.

See also Toolchain-Release/doc/shared_libraries.org