icc, -O3, DISABLE_CALLCC, hardening flags, make deps

add all make deps
make: icc fixes, add LDFLAGS for LINK, harden LDFLAGS
    now with -Wl,-z,relro -Wl,-z,now. faster and more secure initial startup
enable hardening flags
    -pedantic not yet, as it fails to accept casting void* function ptrs
    -Wl,--as-needed -D_FORTIFY_SOURCE=2 (detects jit stack smashing better)
    -fstack-protector-all
    fix minor pedantic issues
renable -O3, only frontends and callcc with -O0
add DISABLE_CALLCC for emcc
    javascript cross-compiler cannot do assembler