subprojects: update ogg and vorbis wraps and add fallback urls
The windows ci runners complain about a self-signed certificate with the download.xiph.org urls.
The windows ci runners complain about a self-signed certificate with the download.xiph.org urls.