buildflags: adding stack-clash-protection and cf-protection

Both flags should be safe for use, on top fairly widely used nowadays
as they are enabled on latest Fedora and Ubuntu 19.10.
1 job for buildflags in 16 seconds (queued for 3 seconds)