[arch-dev-public] testing/curl depends on community/libssh2

I just noticed that a system update pulls in 'libssh2' (as opposed to 'libssh', which I already had installed). 'libssh2' is in community, this should be moved to extra - or we should not depend on it, I don't know.