pkgconf is maintained, doesn't include glib and supports more pkg-config
features and builds faster.
Arch and Fedora have switched long ago, so we should too.
* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes
Remaining md5sums either didn't download or
didn't pass checksum tests.