Uniquify binder names when leaving executor

This mimics the evaluator more closely and prevents shadowing bugs.