Makefile: fix up CFLAGS handling