varnish: update to 6.6.1

CVE-2021-36740: request smuggling attack can be performed on Varnish Cache
and Varnish Cache Plus servers that have the HTTP/2 protocol enabled. The
smuggled requests do not go through normal VCL processing, and any
authorization steps implemented in VCL would be bypassed.

(tnn)