fix(qwp): Error inside upgrade-failure catch arm leaks the connected client

The catch (HttpClientException) arm ran QwpUpgradeFailures.classify()
before newClient.close(). The sibling catch (Error) added in 1582e3a
does not guard catch-arm bodies, so an Error thrown inside classify
(it allocates on the role-reject/auth paths) escaped with the client's
fd and native buffers open -- the exact leak 1582e3a set out to close.

Reorder: close before classify. Safe -- classify reads only heap
fields (upgradeRejectRole/Zone, upgradeStatusCode) that are set during
upgrade() and are not cleared by close(). The arm now has a
zero-allocation window ahead of close().

Author: bluestreak01

core/src/main/java/io/questdb/client/cutlass/qwp/client/QwpWebSocketSender.java

@@ -2768,8 +2768,15 @@ private WebSocketClient connectWalk(ReconnectSupplier ctx) {
                 int upgradeTimeoutMs = (int) Math.min(authTimeoutMs, Integer.MAX_VALUE);
                 newClient.upgrade(WRITE_PATH, upgradeTimeoutMs, authorizationHeader);
             } catch (HttpClientException e) {
-                HttpClientException classified = QwpUpgradeFailures.classify(newClient, ep.host, ep.port, e);
+                // Close BEFORE classify: the sibling catch (Error) below does not
+                // guard catch-arm bodies, so an Error thrown inside classify()
+                // (it allocates on the role-reject/auth paths) would escape with
+                // the client's fd and native buffers open. Safe to reorder --
+                // classify reads only heap fields (upgradeRejectRole/Zone,
+                // upgradeStatusCode) that are set during upgrade() and survive
+                // close().
                 newClient.close();
+                HttpClientException classified = QwpUpgradeFailures.classify(newClient, ep.host, ep.port, e);
                 if (classified instanceof QwpIngressRoleRejectedException) {
                     QwpIngressRoleRejectedException re = (QwpIngressRoleRejectedException) classified;
                     hostTracker.recordRoleReject(idx, re.isTransient(), !background);