declare var firstOctet to avoid global leak

found while testing dependent code, add var declaration inside TlvDecoder.readVarNumber to avoid global leak