Use Jekyll.sanitized_path when adding static files to Collections.

h/t @benbalter https://github.com/jekyll/jekyll/pull/2737#discussion_r16713423
Not sure if the previous code can be exploited, but being super safe is never a bad thing.
Merge pull request #2849 from jekyll/maybe-secure-doc-reading