Keep '--without-ensurepip' when building

The only thing '--without-ensurepip' does, is don't run ensurepip when
installing. This is what we want, because we don't want pip to be present
in the system, but only avaiable for virtual environments. So this should
not have been removed.

Cherry-picked from pascallj/python3.13-backport@75ee3ec

Author: pascallj

patches/ensurepip-enabled.diff

@@ -12,14 +12,6 @@ Author: Pascal Roeleven <dev@pascalroeleven.nl>
 
  # TODO: these hang/fail with new OpenSSL
  PROFILE_EXCLUDES += \
-@@ -371,7 +371,6 @@
- 		--enable-loadable-sqlite-extensions \
- 		--with-dbmliborder=$(dbmliborder) \
- 		--with-computed-gotos \
--		--without-ensurepip \
- 		--with-system-expat \
- 		--with-ssl-default-suites=openssl \
- 		--with-wheel-pkg-dir=/usr/share/python-wheels/ \
 @@ -581,7 +580,7 @@
  endif
  TESTOPTS = -j 1 -w -u$(TEST_RESOURCES) --timeout=3600