Consider adding `j$.*` to refused packages

Moshi will happily runtime serialize the Java types from `java.time` which are rewritten to point at the `j$` variants from Google's JDK desugaring package.

We should block this package the same as we do `java.*`. Unfortunately, it's a behavior change to do so now, so it'll have to come with a 2.0.