Fix TLV duplicate tag check

Duplicate detection ran after the handler, so a repeated
ENFORCE_UNIQUE_TAG tag could re-enter the handler and leave
reception state corrupted.
set_tag() now only records reception; duplicate detection moved to
a pre-handler check.