While here, also switch WWW to https.
I don't quite understand the issue. Why are you not using the proper release tar ball which includes said file?
I could not find a way to get such file using USE_GITHUB. If it is possible to do it of course I would be glad to do it.
Otherwise I think the choice is between:
I choosed the first solution as it looked cleaner to me.