Updated compile options for annocheck hardening Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences. Added an 'annocheck' makefile target for local checking. Signed-off-by: Clark Williams <williams@redhat.com>