Add project dependencies to libarchive

Add libxml2 and zlib as project dependencies, so that older builds can disable system versions of these libs if needed for compatibility.

FYI, they are only needed for the "xar" format, which we don't need to support, but there is no cmake option to turn "xar" off.

Backport: release