Check for free variables in `merge`

[Nadrieril]

This is the one bit where typechecking isn't standard-compliant: we don't check that the type of the branches of the merge don't depend on the passed value. I'm still looking for a way to implement this without writing too much boring traversing code.