[DOM] Clean up Fragment listeners on signal abort

[chirokas]

Summary

Closes #37450
Fixes #37449

Listeners registered with options.signal are supposed to be removed when the signal is aborted.

Since FragmentInstance does not clean up its tracked listeners on abort, previously removed listeners cannot be re-attached.

How did you test this change?

• added tests characterizing the bug in the first commit

[github-actions]

Comparing: 065bc84...2ff47b7

Critical size changes

Includes critical production bundles, as well as any change greater than 2%:

Name	+/-	Base	Current	+/- gzip	Base gzip	Current gzip
oss-stable/react-dom/cjs/react-dom.production.js	=	7.35 kB	7.35 kB	-0.05%	1.96 kB	1.96 kB
oss-stable/react-dom/cjs/react-dom-client.production.js	+0.11%	624.62 kB	625.29 kB	+0.14%	110.38 kB	110.54 kB
oss-experimental/react-dom/cjs/react-dom.production.js	=	7.36 kB	7.36 kB	-0.05%	1.97 kB	1.96 kB
oss-experimental/react-dom/cjs/react-dom-client.production.js	+0.10%	695.84 kB	696.51 kB	+0.13%	121.81 kB	121.97 kB
facebook-www/ReactDOM-prod.classic.js	+0.09%	715.69 kB	716.36 kB	+0.12%	125.24 kB	125.38 kB
facebook-www/ReactDOM-prod.modern.js	+0.10%	706.00 kB	706.67 kB	+0.12%	123.67 kB	123.81 kB

Significant size changes

Includes any change greater than 0.2%:

(No significant changes)

_{Generated by sizebot against 2ff47b7}

[chirokas]

@eps1lon @jackpope

[eps1lon]

Thank you!