package/ci: actually use clang *and* sanitizer.

Uh.
Trade: document default implementation of virtual functions.

Better to have these documented, I came to this after longer pause and
thought that these were all pure virtual.