ccan/wafbuild: use WERROR_CFLAGS instead of -Werror