bluetooth: Fix accessing invalid memory when creating the service proxy

Probably during one rebase, the change that added the GCancellable and its
wrapper helper function, was not propagated to this call. The callback
was expecting to find a GCancellable.