[Pitch] Introduce a way to annotate functions that are called at most once

[tshortli (Allan Shortlidge)]

I've posted a second version of this pitch which adds exactly-once function types and addresses other feedback from this thread.