use CMake to extract zstd

Most of our users will have CMake already, at least as likely as having zstd without having to use an intermediate temporary file. So it's faster and robust.