Leak possible if mkdir fails in getFontForgeUserDir()

Reviewing PR #1599 @frank-trampe noticed an unhandled path that would leave an allocated buffer unfreed.

Fix frees allocated buffer in error handling return.