Forbid unsafe_code

[fintelia]

This crate already uses fully safe code so this PR adds an annotation enforcing that at compile time.

Looking for #![forbid(unsafe_code)] is more reliable than trying to grep the crate source code for instances of "unsafe", since the latter could hypothetically be concealed by macros and such.