Pin curl until https://github.com/curl/curl/pull/19408 is released

[chaen]

There's a regression in curl

$ curl --capath $X509_CERT_DIR -E $X509_USER_PROXY --cacert $X509_USER_PROXY https://xfer-lhcb.cr.cnaf.infn.it:8443/disk/lhcb 
curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)

BEGINRELEASENOTES

CHANGE: pin curl < 8.17

ENDRELEASENOTES