Remove -Wno-sign-compare and fix DISABLE_FATAL_WARNINGS

Turn on sign-compare warnings and allow fatal warnings when
using -DDISABLE_FATAL_WARNINGS:BOOL=OFF during configuration.
The default is no -Werror.