CVE-2026-19445: ssl: take a strong reference to the live SSLContext of the
connection inside the SNI servername callback and clear the servername
callback when a context is freed, so a server callback that switches contexts
and drops the original no longer reads freed memory