libssh2: Fix of CVE-2026-66032

CVE-2026-66032: nullify data after free in sftpopen to prevent a double-free when sftppacketrequire fails on the FXPSTATUS/FXOK path...