Sending CONNECTION_CLOSE frames

We have a bug where we might be sending too much at connection close time. At the same time we should be careful of an on-path attacker spoofing a connection migration.

See https://github.com/n0-computer/quinn/pull/231#discussion_r2713975358