Add -Wformat and -Werror=format-security compiler flags

These are part of the hardening flags used by Debian.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>