Client HttpTransport SSE buffer grows unbounded when server withholds the event delimiter

More info at https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-7m52-jw36-44r3...