[ty] disallow negative narrowing on SubclassOf types (#23598)
## Summary
We can't negatively narrow on an `isinstance` or `issubclass` check
against a variable of type `type[X]`, because at runtime the value of
the variable could be a subclass of `X`.
## Test Plan
Added mdtest.
