tcp: use signed IsLost() related accounting variables

Coverity found that one safety check (kassert) was not
functional, as possible incorrect subtractions during
the accounting wouldn't show up as (invalid) negative
values.

Reported by: gallatin
Reviewed By: cc, transport
Sponsored By: NetApp, Inc.
Differential Revision: https://reviews.freebsd.org/D42180