tmpfs_readdir(): unlock the locked node.

During readdir() we guarantee that the tn_dir.tn_parent does not go
away, but it might be replaced by a parallel rename. Read tn_parent
only once, then use the cached value.

Reported and tested by: pho
Sponsored by: The FreeBSD Foundation
MFC after: 1 week