contrib/expat: import expat 2.8.0

Changes: https://github.com/libexpat/libexpat/blob/R_2_8_0/expat/Changes

Security: CVE-2026-41080
MFC after: 1 week