Add LIBXML_NO_XXE constant (#14844)

This constant is available as of libxml2 2.13, and is used together with
LIBXML_NOENT to allow entity subsitution but disallow external entities.