Add `nullable` and `nonnull` annotations to all functions.

[iphydf]

These help static analysis and ubsan. We should eventually have all
functions annotated like this with a cimple check to make sure every
pointer has an explicit nullability annotation. The nullable
annotation does nothing in GCC, but will be used by cimple to validate
that every parameter has defined nullability.