chore: fix unsafe in unsafe blocks lint

Enable this lint and fix the two cases where it breaks.

boreal/src/compiler/mod.rs

@@ -143,7 +143,10 @@ impl Compiler {
     pub unsafe fn new_with_pe_signatures() -> Self {
         let mut this = Self::new_without_pe_module();
 
-        let _r = this.add_module(crate::module::Pe::new_with_signatures());
+        let _r = this.add_module(
+            // Safety: guaranteed by the safety contract of this function
+            unsafe { crate::module::Pe::new_with_signatures() },
+        );
 
         this
     }

boreal/src/lib.rs

@@ -51,6 +51,7 @@
 #![deny(unused_lifetimes)]
 #![deny(unused_qualifications)]
 #![deny(unused_results)]
+#![deny(unsafe_op_in_unsafe_fn)]
 // Do the same for clippy
 #![deny(clippy::all)]
 #![deny(clippy::pedantic)]

boreal/src/module/pe.rs

@@ -1139,7 +1139,10 @@ impl Pe {
     #[cfg(feature = "authenticode")]
     pub unsafe fn new_with_signatures() -> Self {
         Self {
-            token: Some(authenticode_parser::InitializationToken::new()),
+            token: Some(
+                // Safety: guaranteed by the safety contract of this function
+                unsafe { authenticode_parser::InitializationToken::new() },
+            ),
         }
     }