Use-after-free of caller-owned server name in client connection constructors

In rustls-ffi 0.12.0 through 0.15.6, rustlsclientconnectionnew and rustlsclientconnectionnewalpn retained a reference to the caller's servername buffer after returning, rather than copying it. The API documentation did not require the buffer to outlive the call and as a result if the caller freed...