Deny various warnings in derived code

I just ran into an issue where I forgot to wrap something in unsafe, and the reason was that the emitted code was inside an `unsafe` method impl. We should annotate the impl blocks emitted by zerocopy-derive with `#[deny(unsafe_op_in_unsafe_fn)]` and other reasonable lints.