cmd/tsnet-proxy: TCP mode leaks upstream connection when client disconnects

In TCP mode, proxyTCP never closes the upstream connection when the client disconnects, so it leaks until the backend sends data or closes on its own.

This issue was written with the help of AI (Claude Code). Feel free to close if you think it’s noise.