Add safeJsonParse util

Create `src/safe.js` exporting `safeJsonParse(text, fallback)` that returns the parsed JSON, or `fallback` when parsing throws. The test expects `safeJsonParse("not json", [])` to return `[]`.