First Circuit Rejects Boundless Consumer-Protection Liability for “Pure Omissions”