Add runtime implementation of requires and ensures

[celinval]

At runtime, the safety::requires and safety::ensures attributes could be converted into assert_unsafe_preconditions.