pango: update deps

 - Always depend on newer fontconfig
 - Remove outdated comment about cairo; we always use our cairo these
   days anyway
harfbuzz: does *not* depend on fontconfig
harfbuzz: depends on freetype
harfbuzz 0.9.20
harfbuzz: ensure icu is enabled