Update expat
OCIO reports that our version of expat has a vulnerability, so we need to update that. Since the deps are forked from a specific point in history, we should go in a two-fold way:
- Update expat in the main Krita repository
- Then backport that to split-deps repository