Disallow `--help-syscalls` if seccomp support is missing
Make pkg-config optional

Besides, NOSECCOMP can be set to force building without libseccomp.