Fix exceptions when closing the viewer

[OhadMeir]

options-watcher query loop exposed some problems when closing the application.
Querying options while in the destruction process exposed some race cases where option tried to query a sensor reference that was already destructed.

Now the subdevice-model cancels the on_options_changed subscription and options use weak_ptr to sensor not direct reference.