urlapi: avoid Curl_dyn_addf() for hex outputs

[bagder]

inspired by the recent fixes to escape.c, we really should avoid calling Curl_dyn_addf() in loops, perhaps in particular when adding something so simple such as %HH codes - for performance reasons. This change thus makes the same thing for the URL parser's two URL-encoding loops.