Improve Makefile

* Use parameters from https://wiki.debian.org/Hardening
* Move _GNU_SOURCE definition to Makefile (for mkstemp)

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>