build: miniupnpc: remove submodule, add to depends, update to 2.2.7

[tobtoht]

Based on #9271 (for the cmake depends build command). Do not consider merging before #8929.

Supply chain security checklist:

• [X] The source tarball is GPG signed
• [X] The source tarball does not contain binaries or archives
• [X] The source tarball does not contain auto-generated scripts
• [X] The source tarball does not differ from git source in a meaningful way
• [X] The package has not changed ownership since the last update (2.2.1)

Why?

• Keep release dependencies in one place (depends)
• Allows us to patch the package without forking the repository
• For development builds: miniupnpc is packaged for all relevant distributions

[0xFFFC0000]

We can only merge this or https://github.com/monero-project/monero/issues/9367