Check that the resumption is used at most once for `aff effect`

[forell]

Currently the aff effect construct merely trusts the programmer to use the resumption in an affine way. This should be enforced by the implementation.