assert that Petsc really is initialized when initialized=True

Note that if PETSc is not initialized, the error handling stuff has not been set up, so SETERRQ should not be used.  In practice, PetscInitialized will never return nonzero, but it's worth being aware of.