#[unsafe(no_mangle)]pub extern "C" fn aria_model_destroy(model: *mut AriaModel)
Destroy a model handle. Safe on null. Double-destroy is undefined if caller reuses the pointer.