treewide: add -fcf-protection=full to CFLAGS
    
    This patch adds fcf-protection=full to CFLAGS as annocheck gave a
    warning about it and the recommended way to fix it is by adding this as
    compiler flag.
    
    https://sourceware.org/annobin/annobin.html/Test-cf-protection.html