Also bind <leader> in normal state.

A <leader> bound only in motion state can be shadowed by non-local
normal state maps, e.g. "m" as a leader will be shadowed by
`evil-set-marker'.