chore: add stack-protector-strong flag

[rzhao271]

This PR adds the stack-protector-strong flag to the library, which adds stack canaries to the Linux builds in order to mitigate several BinSkim issues.

TODO:

• Confirm that performance does not regress.
• Confirm that all files that need the flag have the flag.

[rzhao271]

Here's a quick test I tried adding to verify the performance. It did not regress when I switched from compiling with -fno-stack-protector to -fstack-protector-strong. In both cases, the recorded time was below 200ms after a few runs. Let me know whether the test needs work or whether I can add it to the PR.

describe('write performance', function () {
    it('writes 1000 characters within 2s', function (done) {
      this.timeout(10000);
      const term = new terminalConstructor(SHELL, [], {
        cols: 80,
        rows: 24,
        cwd: process.cwd(),
        env: process.env
      });
      const payloadBody = 'a'.repeat(995);
      const payload = 'echo ' + payloadBody + '\r';
      let buffer = '';
      const start = process.hrtime.bigint();
      term.on('data', function (data: string) {
        buffer += data;
        if (buffer.indexOf(payloadBody) !== -1) {
          term.kill();
        }
      });
      term.on('exit', function () {
        const durationMs = Number(process.hrtime.bigint() - start) / 1e6;
        console.log('writing 1000 characters took ' + durationMs.toFixed(2) + 'ms');
        assert.ok(
          durationMs < 2000,
          'writing 1000 characters took ' + durationMs.toFixed(2) + 'ms'
        );
        return done();
      });
      for (let i = 0; i < payload.length; i++) {
        term._write(payload[i]);
      }
    });
  });

[deepak1556]

Thanks!