Fix AID unregister

Correct nfa_ee_find_aid_offset() to find the existing aid entry, so
that it can be unregistered.

Bug: 109878750
Test: NFC Enable/Disable, Register/Unregister offhost AID
(cherry picked from commit 984856087a41738931b32b111e47fb9c24a4effb)
diff --git a/src/nfa/ee/nfa_ee_act.cc b/src/nfa/ee/nfa_ee_act.cc
index 7b572ec..ab1eefc 100644
--- a/src/nfa/ee/nfa_ee_act.cc
+++ b/src/nfa/ee/nfa_ee_act.cc
@@ -612,7 +612,7 @@
 
   p_ecb = &nfa_ee_cb.ecb[NFA_EE_CB_4_DH];
   aid_len_offset = 1; /* skip the tag */
-  for (yy = 0; yy < nfa_ee_cb.cur_ee; yy++, p_ecb++) {
+  for (yy = 0; yy <= nfa_ee_cb.cur_ee; yy++) {
     if (p_ecb->aid_entries) {
       offset = 0;
       for (xx = 0; xx < p_ecb->aid_entries; xx++) {