wasi_nn_ctx_destroy seems to call backend's `deinit` even if `init` was not successful. it doesn't seem safe at least for wasi_nn_tensorflowlite.cpp.