ath9k_htc_firmware: fix the offset of CCMP header for mesh data frame

Mesh data frame uses at least 3 addresses scheme. So set the offset
correctly while fetching the CCMP header. Previously, we are not
able to do HW encryption for unicast data frame. Applying this
patch will allow HW encryption and avoid loading ath9k_htc.ko using
"nohwcrypt=1".

Signed-off-by: Chun-Yeow Yeoh <yeohchunyeow@gmail.com>