configure: Add spectre variant 2 mitigations --enable-hardening adds -mfunction-return=thunk and -mindirect-branch=thunk compiler options if supported.