archivers/rpm4: update to version 4.18.0

Major changes:

• Add a new Sequoia-based OpenPGP backend
• Documentation updates
• Fix intermediate symlinks not verified (CVE-2021-35939)
• Fix subkey binding signatures not checked on PGP public keys (CVE-2021-3521)
• Refactor file and directory operations to use fd-based APIs throughout (CVE-2021-35938)
• Unbreak lua 2 for extensions

Full release note: https://rpm.org/wiki/Releases/4.18.0.html

Also remove version requirement for Lua dependency in port, we just use lua.

PR: 267291
Reported by: Brian Zou <zoujiaqing@gmail.com>
Security: CVE-2021-35939
Security: CVE-2021-3521
Security: CVE-2021-35938