Retain fact that index/offsets for GEP are non-negative for `size_t/uint64_t` offsets?

[RalfJung]

FWIW in Rust we would have good use for nsw – we would possibly use it everywhere instead of inbounds, if only to avoid questions like this.