wlr_seat: fix destroy with multiple handles

Need to use for_each_safe because wl_resource_destroy's callback will remove the handle from the list itself