Guarantee that thread-local storage destructors run before join() returns

[pvillela]

As discussed in #116237 (comment), this is already the implemented behaviour but it is not guaranteed. Unless there is a good reason not to, this guarantee should be made and documented.