Improve `instance_manager` package

[accmltr]

Consider having the Ref constructor be private to the instance_manager package and only be generated with InstanceManager.register.

Consider making Ref.destroy throw and exception that confirms that the object it references once existed, but is now gone. Instead of delegating to the InstanceManager exception, which has a more ambiguous exception message.