std.format: Make double to string conversion @safe

Bonus optimization: avoid redundant and possibly-unsafe strlen