Bug 1004630: Make TabChild inherit mRefCnt from TabChildBase to fix CC leak. r=smaug