Mark std.stdio.File.this, opAssign, open and popen as safe

Now they do not contain any unsafe operations.

After merging this pull request, the following code can be compiled and it works!

```D
auto foo() @safe
{
  // File can be declared in the safe function!
  auto f = File("foo");
}
```