Add `doc/safer_build.md` to explain path anonymization

Otherwise our default build instructions will lead people to build binaries that include their home directory.

Closes #957 (closed) for now.

(A better solution here would require a bunch of tooling, or waiting for the Rust folks to clean up the compiler's behavior.)