Set compiler flags earlier to get -isysroot in all RL builds

[TheBlueMatt]

I'm honestly not sure why this is required or what changed such that I seem to need it now, but its pretty harmless.

Without this, we fail to build the rust-lightning full-crate source file sometimes as we fail to build secp256k1 due to missing headers.