Make `tendril` compatible with strict-provenance rules

Previous attempt here: https://github.com/servo/tendril/pull/64

It seems to mostly be a case of replacing `std::num::NonZeroUsize` with `std::ptr::NonNull`