Thread safety of `AOTIModelContainerRunner::run`

[rdgq]

Are the run and boxed_run methods on AOTIModelPackageLoader/AOTIModelContainerRunner thread safe?