removes CPM, allows cMake to use find_package on Windows (that dependency providers like vcpkg can help with)