prot_putbuf: take a const struct buf * since we don't change it

This allows us to avoid having to cast back to non-const at callers!