Change ownership discipline for ReplayInputLog and ReplayRecording:
the raw log is owned by the recording, and the recording is
refcounted.

Uses of the input log must route through
ReplayController::loadedRecording().

Closes #228.