expat: Fix of CVE-2026-76957

CVE-2026-76957: fix use-after-free from calling XMLParserFree inside a custom unknown-encoding convert or release callback, by routing both through callUnknownEncodingConvert/callUnknownEncodingRelease so they are covered by the handler call depth tracking...