Validate reference counts using asserts
Reference counts in e.g. wl_shm should be validated with assertions, so that overflows and underflows result in a clean crash instead of a use-after-free. The only known way for a client to trigger this was fixed by capping the size of wl_map, so this is purely to guard against buggy compositors that leak references.