Add a protocol error when a surface is damaged without a new buffer

The protocol text says that:

• attach sets the pending buffer
• commit clears the pending buffer
• damage{,_buffer} refers to the pending buffer

So damage{,_buffer} without attach is non-sensical. We should add a protocol error to catch it.

Might require a version bump because someone is probably doing it in the wild…