www/apache-tomcat9: Update to 9.0.41

Changelog for 9.0.41:
  - Align the behaviour of ServletContext.getRealPath(String path) with the
    recent clarification from the Servlet specification project. If the path
    parameter does not start with / then Tomcat processes the call as if / is
    appended to the beginning of the provided path.
  - Fix a potential file descriptor leak when WebSocket connections are
    attempted and fail.
  - Ensure that the LoadBalancerDrainingValve uses the correct setting for the
    secure attribute for any session cookies it creates.

Changelog for 9.0.40:
  - Statistics are now available (via JMX) for HTTP/2, WebSocket and HTTP/1.1
    upgraded connections
  - Stability improvements for HTTP/2
  - Stability improvements for the NIO connector

(otis)