Only emit stacksave/restore where there are any residual allocas to guard
Devirtualise ShadowInstruction, and revert now-obsolete BAA modifcations that depended on its virtual calls.