More resilient file saving by a two-stage file save process

[flxzt]

As mentioned in #1096 it would be very nice to improve the save logic by first saving to a temporary second file and overwriting the first when writing the file actually succeeded.

Right now we are directly overwriting the file, which can corrupt files when the app exits unexpectedly while saving.