Should pull expat from github now it's moved

[iMartyn]

The expat project is moving from SF to github and I got some very strange errors building because SF was unreliable.

https://github.com/libexpat/libexpat/releases contains old releases as well, so fetching from github should be zero ABI change.