lib_tlv: avoid NULL strnlen/memcpy when TLV value is empty

Found by SDK fuzzing (UBSan): guard the scan and copy on value.size > 0 so
a NULL value pointer is never passed to strnlen/memcpy.