Add `differentiability_witness_function` verification.
Assert that `differentiability_witness_function` is never constructed with
null witness.
Verify that type of `differentiability_witness_function` instruction matches
the type of the witnessed SIL function.
