Set up GNU symbol visibility

... plus a few small build/warning-related cleanups.

This works standalone, but after xfce4-dev-tools!123 (merged) is merged and released, I'd remove the copied-in script and use the released version.