Set exceeding bitshifts lint to deny

Discussed in #18587