Tweak macro to require unsafe fns

Since ExternState is fundamentally unsafe, we may as well require the
lua_extern! functions to also be marked as unsafe, because in practice
their entire body ends up nested in an unsafe block.

This will hopefully be reverted if pluggable lints ever become a thing.