Add static memory-safety analysis to CI

[twifkak]

Change build_deb and libsxg's build_deb to have a non-default option to build with debug symbols and safety analysis. Propagate those settings down from end-to-end-test.yml

Candidates:

• https://github.com/google/sanitizers
• https://github.com/google/sanitizers/wiki
• https://clang.llvm.org/docs/index.html