Change the default config to disallow untyped defs

[ambv]

Make errors from it a new "note:"-class message. This would make integrations with editors and review tools like Phabricator more informant that new code should be type-checked.