Build with -mno-red-zone on x86_64

Otherwise, an interrupt may overwrite part of the stack if we're in checksum_stubs.c at the time. Should help with #80 (longer-term, we should get the correct flags from mirage-xen and build separate binaries for Xen and Unix).

Also added -fno-stack-protector in case that's on by default somewhere.