fix Deserialize allocator

tls.Alloc is inappropriate here, because sqlite owns this pointer and may choose to resize it; we must use a sqlite allocator.

The test triggers a crash using a close, but it is also possible (albeit longer and noisier) to trigger via a re-alloc/re-size.