Move imageSafetyHandler pass to be the first one

Thus, we can move some image safety checks from WebCLHeader (called from
kernelHandler) to imageSafetyHandler and rely on them being done already

The tests pass so this seems to be OK otherwise