IR: Disallow function-local metadata attachments