Deny `unreachable_pub` lint

As is done in `core` since https://github.com/rust-lang/rust/pull/134286

cc https://github.com/rust-lang/rust/issues/138054