The makefile patch pulled from alpinelinux used to enable
stackprotector unconditionally. This change use the nixpkgs flag
hardeningEnable.
This is required to support platform where stackprotector has
problems.
We can use use `stdenv.hostPlatform.isStatic` instead, and move the
logic per package. The least opionated benefit of this is that it makes
it much easier to replace packages with modified ones, as there is no
longer any issue of overlay order.
CC @FRidh @matthewbauer
