Use lang attribute for code block languages

Using language classes allows users to add any class to the page. Setting :safe_lang to true will use a lang attribute instead.

@robin850, was there any other reason for overriding #block_code in the Safe renderer, or could that be replaced by defaulting :safe_lang to true?