CVE-2026-15308: fix quadratic-complexity CPU denial-of-service in the
HTMLParser incremental parser - accumulate feed() data in a buffer and only
join/rescan once enough has piled up, instead of re-concatenating and
re-scanning the whole unparsed buffer on every feed() call. Backported from
upstream CPython (gh-153030, GH-153031).