build: enable -Wextra by default

Also delete redundant 'return 0' from configure code snippets.

Change-Id: Ie3618db4abece6fb2d8ec8b52b88e84b4eb3a5b0
Refs: #3293
diff --git a/.waf-tools/osx-security.py b/.waf-tools/osx-security.py
index 9bcb3a8..f7f273e 100644
--- a/.waf-tools/osx-security.py
+++ b/.waf-tools/osx-security.py
@@ -10,11 +10,7 @@
 #include <Security/SecRandom.h>
 #include <CoreServices/CoreServices.h>
 #include <Security/SecDigestTransform.h>
-
-int main(int argc, char **argv) {
-    (void)argc; (void)argv;
-    return 0;
-}
+int main() {}
 '''
 
 @conf