Fix Once.perform/3 leaking server process on error

Use try/after to ensure server is always stopped, even when
Server.perform returns {:error, _}.