Allow One Function Call

Return a wrapper for a given function that calls the original at most once: it should invoke and return fn's result on the first call, then always return undefined on subsequent calls (use a closure to track call state).