Define public/private functions in the spec

[aborgna-q]

We should specify that public function names must be unique (though we allow aliasing of same-signature fns)

[cqc-alec]

Should we require that private function names are also unique? This would have advantages for debugging; any disadvantages?