feat: Add rule to disallow calling `off` without specific listener

Description

A rule like this would have prevented this regression. It's important that modules only clean up their own stuff, otherwise we introduce very sneaky global coupling. This linter isn't prefect, and it's fine to disable in some cases, but we believe that it's worth having for the majority of cases where this could cause problems.