08: CVE-2026-7009 fix incomplete for AWS-LC: `--cert-status` bypass on SecTrust path

The fix for CVE-2026-7009 (commit `51905671e0`) does not cover AWS-LC. In `ossl_apple_verify()` in `lib/vtls/openssl.c`, a missing OCSP staple is detected only when `SSL_get_tlsext_status_ocsp_resp()` returns a negative length. OpenSSL returns `-1` for absence, but AWS-LC returns `0` with a `NULL` …

long ocsp_len = 0;
bool ocsp_missing = FALSE;
if(conn_config->verifystatus && !octx->reused_session)
  ocsp_len = (long)SSL_get_tlsext_status_ocsp_resp(octx->ssl, &ocsp_data);

if(ocsp_len < 0) {
  ocsp_len = 0;
  ocsp_missing = TRUE;
}