PPX that forbids specific function calls or modules at compile time

A configurable PPX rewriter that traverses the AST and raises compilation errors when forbidden functions or modules are used. Useful for enforcing coding standards like 'use Eio instead of blocking Unix calls' or 'never use Obj.magic'. Supports per-project configuration via .ppx_forbid files and [@allow_forbidden] attributes for suppression.