Fix appending of debuild options from mkpkg.sh command line
Enable build-time hardening options mentioned by lintian

This requires a new version of restartd (> 0.2.3), so update
changelog for upcoming v0.2.4-1.
mkpkg: rename MODE options to host/pbuilder