common/numeric: better parsing of thousands-delimited numerals

Feeding a long numeral to `eval()` is both insecure and incomplete,
since it cannot parse numbers with thousands-separator, like:
   100,123,123.82

A regex is more suitable for the job, although these separators are,
eventually, ambiguous.