CVE-2026-81934: fix use-after-free in tlsProcessPendingData() by detaching
each pending TLS connection from the head of pending_list before invoking
its event handler, instead of iterating with a listIter whose pre-cached
next pointer could dangle when the handler closed another connection