Consider using `@RequiredModifiers` on `Aggregate`

[alexander-yevsyukov]

It would be good to require classes derived from the Aggregate being package access. Methods can be package access or private as they are called internally.

We can also have @DoNotCall if these methods are package access.