File System Jail

The [file system jail](https://github.com/jekyll/jekyll-filesystem-jail) proxies all access to the file system to ensure compliance with certain security requirements. This pull request replaces all calls to the file system with calls to the proxy.

The jail proxies:

- `write`s
- `read`s
- `file_allowed?` (a custom method to check if `safe` is turned on and if the file is a symlink)
- `glob`
- `file?`
- `directory?`

It does **not** proxy:

- `basename`
- `dirname`
- or any other path manipulation which does *not* touch the file system (i.e. string manipulations)

/cc @mastahyeti, @gregose for their :eyes: 

**More work is required on the jail gem**, but I've purposely loosely-required the jail gem so it can be updated according to SemVer (minor bump for large-ish changes) without requiring a release of Jekyll.
`context` is an instance of `Liquid::Context`. Check out the method below which extracts the context's site's jail.