Extend Manifest with safe entry

[domolitom]

To give a warning to the programmer about possible supply chain vulnerabilities, we have decided to extend the package manifest with the "safe" keyword.

So far a package is considered safe if it doesn't :

• Use IO (has IO effect)
• Use unchecked effect casts
• Use interop with Java
• Depend on another unsafe package