RecordLayer.tryReadRecord

Attempts to read the next complete TLS record.

Reads from the internal buffer first, then from the transport. Returns TlsProgress.DONE when a complete record is available, TlsProgress.NEED_READ when more data is needed from the transport, or TlsProgress.ERROR on I/O failure or EOF.