restrict 'cabal-install' < 3.10.3

Stackage uses the version of 'Cabal' that GHC ships with.

As of GHC 9.8.2, that's 'Cabal-3.10.2.0', so the version of
'cabal-install' that we support must be compatible with it.

build-constraints.yaml

@@ -459,7 +459,7 @@ packages:
 
     "Mikolaj Konarski <[email protected]> @Mikolaj":
         # - Cabal # take the one that ships with GHC
-        - cabal-install
+        - cabal-install < 3.10.3 # we build against 'Cabal' shipped with GHC; as of 9.8.2 that's Cabal-3.10.2
         - sdl2-ttf
         - enummapset
         - assert-failure