Improved checks to safety invariants in FFI

[jorgecarleitao]

This PR replaces asserts by errors on reading from FFI, and makes the docs of internal functions more explicit about what is the invariant being up-held. It does not cover every invariant that the "C data interface" requires, but it bring us closer to it.

Note that this does not change anything about the unsafe of the FFI - the main change is that we no longer panic if the passed data is incorrect, we just error. We further error if pointers are not properly aligned (which are part of the C data interface invariant but we can check them at O(1) and provide a good error message).

[codecov]

Codecov Report

Merging #1154 (e7c3cbd) into main (6de9edf) will decrease coverage by 0.06%.
The diff coverage is 62.10%.

@@            Coverage Diff             @@
##             main    #1154      +/-   ##
==========================================
- Coverage   83.67%   83.61%   -0.07%     
==========================================
  Files         365      365              
  Lines       35865    35914      +49     
==========================================
+ Hits        30011    30029      +18     
- Misses       5854     5885      +31     

Impacted Files	Coverage Δ
src/ffi/array.rs	81.90% <62.10%> (-7.63%)	⬇️
src/io/ipc/read/array/boolean.rs	90.74% <0.00%> (-7.41%)	⬇️
src/io/ipc/read/common.rs	95.31% <0.00%> (+0.39%)	⬆️
src/io/ipc/read/reader.rs	96.65% <0.00%> (+0.66%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6de9edf...e7c3cbd. Read the comment docs.