kernel: introduce KERNEL_WERROR config option