Bump the maximum CMake version.

This changes which policies are marked "new." We need this bump to
override cache variables with non-cache variables when configuring
the `ThirdParty/token` module.