Fix: libcrmcommon: avoid possible buffer overflow in pcmk__time_format_hr()

Also add a unit test.

Thanks to Adam Korczynski <Adam@Adalogics.com> and the OSS-Fuzz project for
finding and reporting the issue.