Add ext-mbstring to list of requires

The mbstring extension isn't enabled by default in PHP, so this dependency should be declared so that "composer install" will display an appropriate message, avoiding a runtime failure (and when it eventually gets extension install capabilities via Pickle or similar, it could even enable mbstring automatically).