scan-build: close stdio FILEs on error in tor-gencert

This is harmless, since tor-gencert exits right afterwards, but it's
best to clean up after ourselves.