statem: fix missing SSLfatal in TLSv1.3 ticket construction

statem: fix missing SSLfatal in TLSv1.3 ticket construction

tls_construct_new_session_ticket() assumed ssl_session_dup() calls
SSLfatal() on failure but it never does, unlike all its other call
sites which call SSLfatal() themselves. An allocation failure there
made the construct function return CON_FUNC_ERROR without entering
the fatal state, tripping the check_fatal assertion in
write_state_machine() on debug builds.

Assisted-by: Claude:claude-fable-5
Reviewed-by: Matt Caswell <matt@openssl.foundation>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Mon Aug 10 13:55:51 2026
(Merged from https://github.com/openssl/openssl/pull/32183)