quic: prevent copying ngtcp2_cid_token

PR-URL: #48370
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

src/quic/session.cc

@@ -645,7 +645,7 @@ void Session::Destroy() {
 
   for (auto cid : cids) endpoint_->DisassociateCID(CID(&cid));
 
-  for (auto token : tokens) {
+  for (const auto& token : tokens) {
     if (token.token_present)
       endpoint_->DisassociateStatelessResetToken(
           StatelessResetToken(token.token));