Mirror zlib tarball in S3 and use mirrored tarball for packaging

When a new Zlib release comes out, the previous release is not available
anymore at zlib.net/zlib-{version}.tar.gz. This breaks the packaging
process.
Add CONTRIBUTING