cmake: quote CXX_FLAGS substitution for MSVC

[liamwhite]

This will cause an error about too few arguments to REPLACE if it's empty.