Gate access to attributes behind conventions

[loewenheim]

Taking #5149 even further, we could disallow access to individual attributes in an Attributes object via bare strings, and instead require passing a token defined in relay-conventions. That way we could enforce that only known, non-deprecated attribute names are used.

[linear]

RELAY-170