Unicode escapes must be scalar values

Explicitly disallow the JSON UTF-16 surrogate hack
which would cause portability issues.