CVE-2026-7210: when hash randomization is enabled, seed libexpat's
hash-flooding protection in pyexpat with a full 16 bytes of entropy via
XML_SetHashSalt16Bytes, detected at runtime through a weak symbol so it
activates once the system libexpat exposes it, instead of the 4-8 byte
XML_SetHashSalt