Seal lock/unlock-stream where possible.

Add sealed domains for lock-stream and unlock-stream on
<byte-string-stream>, <unicode-string-stream>, and
<simple-wrapper-stream>.