cmake: mark chars explicitly signed (ARM defaults to unsigned)