[3.14] gh-135561: ensure that the GIL is held when handling an HACL* error in _hmac (GH-135562)

[3.14] gh-135561: ensure that the GIL is held when handling an HACL* error in _hmac (GH-135562) #184161