Explicitly look for Assuan2 in CMakeLists

Keeping the dependencies close together makes them easier to
read and for tools to detect.