Detect negated content absent buffer 2224 v12.4

[catenacyber]

Link to redmine ticket: https://redmine.openinfosecfoundation.org/issues/6575

Describe changes:

• detect: unify multi-buffer code

#10422 with fixed typo between krb4 cname and sname leading to failed SV

Preliminary work for #10334