Proxy.Do dialed a new gRPC client for every proxied call and never closed
it, so each request leaked an HTTP/2 connection and its read buffers and
API memory grew steadily under replay/cancel traffic. GRPCClient now keeps
its ClientConn and exposes Close, and the proxy closes it when the call
returns.