CVE-2026-19445: ssl: look up the servername callback's context from the live
socket instead of a borrowed pointer, and clear the callback when a context is
deallocated, so switching contexts from the callback can no longer leave a
freed SSLContext reachable