Enforce invariants in popup_to_covered_windows

[carbon-steel]

Use metatables to make sure that popup_to_covered_windows never returns window ids that have already been closed. Make sure to check both keys and values.