docs: `Sub<DateTime>` impl for `DateTime` should state it cannot overflow or underflow

[Muon]

The Sub impl for DateTime defers to DateTime::signed_duration_since. The latter is documented as being total, so the former should be as well.

[djc]

I'm happy to review a PR for this.