build: switch to hiding libnotmuch symbols by default