deps: switch to HTTP download for SDL2_image

libsdl.org uses a StartSSL cert, which is not trusted by the wget
installed with MSYS.