gallium: fix lack of surface reference counting in cso_set/save/restore_framebuffer()