gh-40775: Update curl and cmake
    
<!-- ^ Please provide a concise and informative title. -->
<!-- ^ Don't put issue numbers in the title, do this in the PR
description below. -->
<!-- ^ For example, instead of "Fixes #12345" use "Introduce new method
to calculate 1 + 2". -->
<!-- v Describe your changes below in detail. -->
<!-- v Why is this change required? What problem does it solve? -->
<!-- v If this PR resolves an open issue, please link to it here. For
example, "Fixes #12345". -->
This pull request updates the version of the `curl` package to the
latest release and updates the associated checksum values to ensure
package integrity.
Our curl and cmake are pretty old.
Version update:

* Updated `curl` package version from `7.84.0` to `8.16.0` in
`build/pkgs/curl/package-version.txt`.
* Updated `cmake` package version from `3.31.2` to `3.31.9` in
`build/pkgs/cmake/package-version.txt`.
Checksum updates:

* Updated the `sha1` and `sha256` checksums in
`build/pkgs/curl/checksums.ini` to match the new `curl` tarball for
version `8.16.0`.


### 📝 Checklist

<!-- Put an `x` in all the boxes that apply. -->

- [x] The title is concise and informative.
- [x] The description explains in detail what this PR is about.
- [ ] I have linked a relevant issue or discussion.
- [ ] I have created tests covering the changes.
- [ ] I have updated the documentation and checked the documentation
preview.

### ⌛ Dependencies

<!-- List all open PRs that this PR logically depends on. For example,
-->
<!-- - #12345: short description why this is a dependency -->
<!-- - #34567: ... -->
    
URL: #40775
Reported by: Chenxin Zhong
Reviewer(s): Copilot

Author: Release Manager

build/pkgs/cmake/checksums.ini

@@ -1,4 +1,4 @@
 tarball=cmake-VERSION.tar.gz
-sha1=b87bd9de209a60d7bc81b8fed594ea26adb4f716
-sha256=42abb3f48f37dbd739cdfeb19d3712db0c5935ed5c2aef6c340f9ae9114238a2
+sha1=d6a9dd76be108d744054a9a586f450fbaa94df1b
+sha256=5d4fdec04247ca8a8e8f63692f0d0f1e9d6d082a2bdd008dff8ab3ba7215aa83
 upstream_url=https://github.com/Kitware/CMake/releases/download/vVERSION/cmake-VERSION.tar.gz

build/pkgs/cmake/package-version.txt

@@ -1 +1 @@
-3.31.2
+3.31.9

build/pkgs/curl/checksums.ini

@@ -1,4 +1,4 @@
 tarball=curl-VERSION.tar.bz2
-sha1=0113fe762aed27d58c4e53ce2be7a98bc7f74957
-sha256=702fb26e73190a3bd77071aa146f507b9817cc4dfce218d2ab87f00cd3bc059d
+sha1=51fb1a8f8a9f6313364fa94c1f8e3a62431648ba
+sha256=9459180ab4933b30d0778ddd71c91fe2911fab731c46e59b3f4c8385b1596c91
 upstream_url=https://curl.se/download/curl-VERSION.tar.bz2

build/pkgs/curl/package-version.txt

@@ -1 +1 @@
-7.84.0
+8.16.0

build/pkgs/curl/spkg-install.in

@@ -1,10 +1,10 @@
 cd src
-CURL_CONFIGURE="--with-openssl $CURL_CONFIGURE"
+CURL_CONFIGURE="--with-openssl --without-libpsl $CURL_CONFIGURE"
 
 if [ "$SAGE_FAT_BINARY" = yes ]; then
     # Let's disable a bunch of stuff which might get linked.
     # SSL/TLS still depends on the compilation environment.
-    CURL_CONFIGURE="--disable-ldap --disable-ldaps --disable-rtsp --disable-ares --disable-crypto-auth --without-libpsl --without-libssh2 --without-librtmp --without-libidn --without-nghttp2 --without-gssapi $CURL_CONFIGURE"
+    CURL_CONFIGURE="--disable-ldap --disable-ldaps --disable-rtsp --disable-ares --disable-crypto-auth --without-libssh2 --without-librtmp --without-libidn --without-nghttp2 --without-gssapi $CURL_CONFIGURE"
 fi
 
 sdh_configure $CURL_CONFIGURE