CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate when a
peer sends multiple key update messages requesting a response in a single
record by adding a locked flag to setReadTrafficSecret so it calls
sendAlertLocked instead of re-locking the connection mutex