Add gcc-10 job, drop gcc-9 config from allow_failures (seems stable again). Use -O2 for all gcc -Werror jobs otherwise warnings triggered under e.g. aggressive inlining are not found.