Ensure that `Arbitrary` respects `Invariant` somehow

[adpaco-aws]

The #[derive(Invariant)] macro introduced in #3250 allows the derived Arbitrary to generate values which don't respect the invariant, as explained in this comment. We should figure how to check for these cases, although that might become clearer once we've finished adding the remaining features for type invariant.