CVE-2026-19445: fix a use-after-free in the SNI servername callback by taking
the SSLContext from the live socket, with a strong reference, instead of the
borrowed pointer registered on the SSL_CTX, and by unregistering the callback
in context_dealloc, so a context released after the callback has switched the
connection to another context can no longer be reached through the
connection's session_ctx