freeipa.spec: bump the required version of 389ds
    
    In order to get the fix for sync_repl, the following versions
    are required:
    on fedora32: 1.4.3.19-1
    on fedora33 and above: 1.4.4.12-1
    on rhel 8.4: 1.4.3.16-11
    
    Note: the fix is not available yet on fedora32 as the build has
    been marked as obsolete due to a pkispawn regression
    (https://github.com/dogtagpki/pki/issues/3458).
    The version will need to be updated in a later commit.
    
    Fixes: https://pagure.io/freeipa/issue/8496
    Reviewed-By: Francois Cami <fcami@redhat.com>