A reinforcing HNF4-SMAD4 feed-forward module stabilizes enterocyte identity