SECURITY UPDATE: use-after-free in server-side SSL SNI callbacks
debian/patches/CVE-2026-19445.patch: stop using a borrowed SSLContext
callback argument, retain the current context and callback during SNI
dispatch, and unregister the callback before context teardown; add
regression tests for callback exceptions and TLS 1.3 HelloRetryRequest
redispatch