curl: Re-entrant curl_easy_pause UAF in cw-pause

Summary This report is a bypass of the prior fix for the nested curleasypause re-entrancy issue described in HackerOne report 4102061. The original patch guarded the writer path in lib/cw-out.c by adding a re-entrancy guard around cwoutflushchain, but it did not guard the sibling writer...