package.mk: replicate SSP and relro in both CFLAGS and LDFLAGS