Implement "immutable" headers guard

[guybedford]

Fetch requests should return a response with headers marked with an "immutable" guard, where check_guard should always fail. In the Fetch spec it appears this is only ever done for responses.

Would this make sense to consider as an addition? Or is another implementation mechanism planned?