Ensure no state changes after mDestroyed=true (4/n)

mDestroyed=true is a terminal state. No more state changes should happen
after reaching the final state.

Since abandon() can be called at any moment, checking mDestroyed and
setting mCommitted/mRelinquished must be done in the same synchronization
block to prevent state changes after mDestroyed=true.

Bug: 161765186
Test: atest StagedInstallTest AtomicInstallTest StagedInstallInternalTest
Change-Id: I301ab7d89332cfbf14bd69b7b2601fe26bd0eaf3