Fix potential integer overflow in Type 3 Tag block operations.

The block_id variable is changed to uint32_t to handle block IDs up to 65535. The bounds checks and loop conditions in rw_t3t_send_next_ndef_update_cmd and rw_t3t_send_next_ndef_check_cmd are updated to perform calculations using uint32_t to prevent integer overflow when determining the range of blocks to write or check. The command buffer is now freed on error in the bounds check.

Bug: 503544522
Test: Manual
Flag: EXEMPT BUGFIX
(cherry picked from commit 241c49442390509f106f711ffcf11a476508898a)
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:f8909f95a729b02556a6c586df65e7fdf71921d1
Merged-In: I53765774042218c3fd25985e7da64ccbe9bc57fd
Change-Id: I53765774042218c3fd25985e7da64ccbe9bc57fd