Require gems in :jekyll_plugins group in a Gemfile in unsafe mode.

Means you *don't* need to add it to your `_config.yml` under `gems` **but only when running in unsafe more**.

I need a test for this. Plz.

Replaces #1658. /cc @imathis