manifest: track our fork of libsepol