harfbuzz: bump to version 0.9.40

Also add hash file.
And do an autoreconf run since otherwise the libtool patch fails.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>