mk: quote KERNELCC to allow ccache build