Fix potential memory leaks on error paths identified by Copilot

SSL_CTX_add0_chain_cert only takes ownership on success so certs needs to be freed on the failure path.

If realloc() fails, the original p_data pointer is lost