curl: Enable HTTP Strict-Transport-Security (HSTS) for build in CMake
Upstream curl enabled this by default starting in curl 7.77. We merged that version of curl in !6168 (merged) but accidentally switched HSTS off in the build system. Enable it now.