Support sealed subclasses

This requires the introduction of the sealed modifier + support for the new permits syntax

Theoretical APIs:

// Note: SEALED is not available in modifiers yet/
TypeSpec.Builder#permits(ClassName)

When permitted subclasses are present, emit a sealed modifier and permits syntax