vte: Update to latest 0.28 (0.28.2)

This also switches to the .xz tarball and an SHA256 sum.