configure: Split adding of CFLAGS and CPPFLAGS for hardened toolchain