ci: Enable --werror by default in CI

It was an oversight that it wasn’t enabled before, which meant that really legitimate compiler warnings like those in https://gitlab.gnome.org/GNOME/gnome-software/-/jobs/3095068 were not getting caught, and were leading to failures like !1783 (merged).

Signed-off-by: Philip Withnall philip@tecnocode.co.uk