graphics/graphite2 update

[coypu%SDF.ORG@localhost]

Hello,

This package has at least 14 CVEs for the version in -current fixed in
1.3.7. More are probably soon to come (Mozilla has disabled it in the
latest Firefox despite the fixes).

I have put an updated version in wip, I have tested that LibreOffice and
Firefox* build and seem to run.

Please take this change during the freeze - it is a security fix.

* while graphite2 is not used by Firefox, it is listed as a dependency
  for Firefox because we have some patches that check for its existence.

Is it preferable I mention package updates in tech-pkg?

coypu