config.h: idempotent-wrap the generated config.h