Pushing cheats around.

Strengthened the invariant on constructor environments to prohibit
duplicate constructors.  The type system should guarantee this, but it
wasn't part of the tenvC_ok predicate before.