wayland/actor-surface: Handle surface actor destruction

A surface actor may be destroyed without the backing Wayland surface
being destroyed yet, e.g. by the window being unmanaged. Handle this by
listening on the "destroy" signal and making late requests (e.g.
wl_surface_commit()) resilient against the lack of a surface actor.

Fixes: #838

!825
4 jobs for master in 7 minutes and 25 seconds (queued for 1 second)
Status Job ID Name Coverage
  Build
passed #454591
build-mutter

00:04:21

passed #454592
build-without-native-backend

00:03:12

 
  Test
passed #454594
can-build-gnome-shell

00:01:34

passed #454593
test-mutter

00:03:03