Deny error logging

[guybedford]

Currently deny errors in Wasi-VIRT are panics.

It could be worth investigating a stderr version of the deny output that notes the subsystem denial that has taken place to use in debugging workflows.