[stability] Better handling of `create_failed` and `destroy_failed` apps

Currently once an app reaches these two states, users have no way to get rid of it.

If create_failed - the app should not show up at the beginning in user app index page. Just show a log message of that. Internally, we need to clean up the state, release oo system resources, roll back.

If destroy_failed - force destroy the app internally, and log the event.