implement the limit of unsuccessful decryptions for the AEADs

[marten-seemann]

Fixes #2530.

This counts the number of unsuccessful decryption attempts over the lifetime of the connection and closes it once it exceeds the maximum number allowed by the AEAD.

[codecov]

Codecov Report

Merging #2771 into master will increase coverage by 0.00%.
The diff coverage is 91.67%.

@@           Coverage Diff           @@
##           master    #2771   +/-   ##
=======================================
  Coverage   86.90%   86.90%           
=======================================
  Files         128      128           
  Lines        9981     9999   +18     
=======================================
+ Hits         8673     8689   +16     
- Misses        980      982    +2     
  Partials      328      328           

Impacted Files	Coverage Δ
internal/protocol/protocol.go	100.00% <ø> (ø)
internal/handshake/updatable_aead.go	96.13% <90.00%> (-1.03%)	⬇️
internal/qerr/error_codes.go	100.00% <100.00%> (ø)
qlog/types.go	85.12% <100.00%> (+0.14%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ba9f98d...45246da. Read the comment docs.