cgal: fix src

I'm sorry for the wrong combination of URL and hash.
These release tarballs are much smaller; I don't know the difference,
but they still seem to work (openscad, rpacad).

Also comment on modules that aren't built.