debian: updates to meet recent Debian developments

* drop build-deps on hardening-* in favour of dpkg-buildflags;
* don't depend on a particular g++ version.