hs-v3: Memleak on SIGHUP

On SIGHUP, we move the hs state between service objects.

Because hs_service_new() allocates the replaycache by default, we overwrite it within move_hs_state():

  dst->replay_cache_rend_cookie = src->replay_cache_rend_cookie;

We have to free the dst cache before.