runtime: make out-of-memory failures fatal

Match the Go runtime by terminating instead of unwinding when an
allocator exhausts the heap. Recovering an OOM can leave allocator locks
held and cannot safely continue when the panic path itself needs memory.

src/runtime/gc_boehm.go

@@ -87,7 +87,7 @@ func alloc(size uintptr, layout unsafe.Pointer) unsafe.Pointer {
 	gcResumeWorld()
 	gcLock.Unlock()
 	if ptr == nil {
-		runtimePanic("gc: out of memory")
+		runtimeFatal("gc: out of memory")
 	}
 
 	return ptr