Incomplete Fix for CVE-2026-21637: OCSPRequest and resumeSession Events Crash Node.js TLS Server via Unhandled Synchronous Exceptions

The March 2026 security release patched CVE-2026-21637 by wrapping `SNICallback`, `ALPNCallback`, and `pskCallback` invocations in `try/catch` blocks inside `lib/internal/tls/wrap.js`. That fix is present in v26.3.0.

// lib/internal/tls/wrap.js — line 324-328
debug('server oncertcb emit OCSPRequest');
socket.server.emit('OCSPRequest',       // <-- no try/catch
                   ctx.getCertificate(),
                   ctx.getIssuer(),
                   onOCSP);