Don't call grpc_create_chttp2_transport after destroying the server

Add synchronization in server_secure_chttp2.c to avoid propagating a
completed handshake past that layer to a potentially already destroyed
server.