[build] Allow NO_WERROR=1 to inhibit --fatal-warnings as well as -Werror