Although a DecodedDrawImage isn't safely usable after being returned via DrawWithImageFinished, nothing in the current API contract ensures this. We should make DecodedDrawImage a move-only type (or unique-ptr), ensuring that it is returned to the ImageDecodeCache as part of DrawWithImageFinished. This isn't just a sanity-check, but allows for future optimizations that rely on SkImage uniqueness during destruction.