catch and deny build warnings in CI

[tzemanovic]

make sure that warning such as the one fixed in #3175 are detected and denied in CI (they should not be denied for local development as that can cause unnecessary friction)