CMake: confine Windows-specific link flags