renderer/loader: introduce explicit ownership policies for memory loader

- Propagate Borrow, Copy, and Transfer through memory loaders
- Release transferred raw image buffers when their loader is destroyed
- Preserve the existing bool copy APIs as compatibility wrappers

This foundational ownership options could be promoted with the official
APIs later.