requirements: We need qrencode ourselves

It probably is a dependency of monkeysign anyway, but as we
call qrencode directly, we better require it ourselves.