net/curl: update to 8.19.0

Changes:
* initial support for MQTTS
* curl: support fractions for --limit-rate and --max-filesize
* curl: with -J, use the redirect name as a backup

Includes fixes for
CVE-2026-1965: bad reuse of HTTP Negotiate connection
CVE-2026-3783: token leak with redirect and netrc
CVE-2026-3784: wrong proxy connection reuse with credentials
CVE-2026-3805: use after free in SMB connection reuse

net/curl/Makefile

@@ -1,6 +1,6 @@
 COMMENT=	transfer files with FTP, HTTP, HTTPS, etc.
 
-DISTNAME=	curl-8.18.0
+DISTNAME=	curl-8.19.0
 SHARED_LIBS=	curl                 26.34    # 12.0
 CATEGORIES=	net
 HOMEPAGE=	https://curl.se/

net/curl/distinfo

@@ -1,2 +1,2 @@
-SHA256 (curl-8.18.0.tar.xz) = QN95Fm50qiAUk2XhHuTHmKRq1Xw05PaP0TEA4smpGUY=
-SIZE (curl-8.18.0.tar.xz) = 2801444
+SHA256 (curl-8.19.0.tar.xz) = TrQUiXkNGeGQ16x+GOgoV83Wivj05mspLO1WLTM/Ed8=
+SIZE (curl-8.19.0.tar.xz) = 2787584

net/curl/patches/patch-m4_curl-compilers_m4

@@ -9,7 +9,7 @@ Do not override optimization flags in CFLAGS.
 Index: m4/curl-compilers.m4
 --- m4/curl-compilers.m4.orig
 +++ m4/curl-compilers.m4
-@@ -710,7 +710,7 @@ AC_DEFUN([CURL_SET_COMPILER_OPTIMIZE_OPTS], [
+@@ -711,7 +711,7 @@ AC_DEFUN([CURL_SET_COMPILER_OPTIMIZE_OPTS], [
      tmp_options=""
      tmp_CFLAGS="$CFLAGS"
      tmp_CPPFLAGS="$CPPFLAGS"