build: run cppcheck in builds