don't allow uninitialized uses of shared

[tjhance]

using uninitialized shared is actually unsound for gshared - and it's also unsound for normal shared in the version where shared gets compiled to pointers/references.

dafny already has checks for uses of uninitialized variables - we need to figure out how to get those checks to run on shared/gshared variables.