3.16: move lcms2 to core-deps

This dependency is getting bumped too high too often. colord often needs
a recent lcms2, so build it if not present.