chore: Upgrade bundled Expat to 2.6.0

Update the bundled Expat library to version 2.6.0 for the fix
related to CVE-2023-52425.

CI: fix installing gzip need sudo