KTOR-9817 Retain borrowed CF references in CertificatePinner before bridging (#5802)

CFDictionaryGetValue follows the Get Rule and kSecAttrKeyType* are framework
constants, so none of them are owned by the caller. Passing them straight to
CFBridgingRelease over-releases six objects per TLS handshake.