Handle panics when returning to COM

[Rantanen]

Panics are not FFI safe. We should handle these in some way.

• For fallible methods, return E_UNEXPECTED instead. (In Windows the localized message for this is "Catastrophic failure", which is suitably scary).
• For infallible methods do abort(). Nothing else we can do here really.