replace strtok from the whitelist with strtok_r, add module_strsplit

`strsplit` creates a list_t of strings from a writable input string, the input string is not usable afterwards as this uses strtok, but it's small and handy