Add support for a "no-owned bson" mode for JS Scopes

Currently, we rely on users of the JS layer to always mark objects as owned, or call advanceGeneration as needed to invalidate view-only types. We should add a mode to the scope which enforces ownership to prevent unowned objects from being passed in if we're not expecting them