object.c

destroy() could leak/fatal if the thread received a signal
(eg due to cleanup_thread_state()). Delay any such signal
until destroy() is done.

Fixes fatal "Shouldn't get an exception in destruct()." on exit in
async_tls_close_test in pikes compiled --with-cleanup-on-exit.