fix: use more strict compiler flags

[anonrig]

Enables more strict compiler flags to avoid warnings like this:

external/+http+ncrypto/include/ncrypto/aead.h:22:54: warning: field 'info_' will be initialized after field 'aead_' [-Wreorder-ctor]
   22 |   Aead(const AeadInfo* info, const EVP_AEAD* aead) : info_(info), aead_(aead) {}
      |                                                      ^~~~~~~~~~~  ~~~~~~~~~~~
      |                                                      aead_(aead)  info_(info)
1 warning generated. 

[anonrig]

cc @jasnell @aduh95 can you review?