Add sftpc_get_err() function and make the sftp client struct hidden

This eliminates the hack of using ssh_mutex to protect members of
sftp_state (which has its own mutex).

This doesn't fix the problem of sftp_state itself though.