fix: cleanup in gcm tag mismatch

[ChALkeR]

Wiping [xk, authKey, tagMask, counter] on failure was never done, only on success

See also SIV (which has a better reason to do that though because of plaintext)

noble-ciphers/src/aes.ts

Lines 1137 to 1140 in 4361ffc

	if (!equalBytes(tag, expectedTag)) {
	clean(...toClean);
	throw new Error('invalid polyval tag');
	}

No tests seem to fail + no one should be attempting to call decrypt with the same params/instance on failures again I think