configure: Move gcc-only -W option where it belongs
configure: Provide an hardened toolchain option