Catch unwinds in native callbacks

[kmod-midori]

According to this article, unwinding across FFI boundary is still a UB, which we'd better avoid.
Even though we can carefully examine our code to ensure that no unwrap is there, accidents can still happen, turning a programming mistake into a live accident.