Prevent sending multiple delivery states for the same message.

[vcabbage]

Currently it's possible to call accept/modify/reject/release multiple times on the same message and have a disposition sent multiple times. These are all terminal delivery states and only the first call is valid.

• Ensure that only the first call sends a disposition.
• Document the behavior.
• Possibly change the signatures to return errors so that this can be reported to the user.