Tidy check against undocumented unsafe misses some cases

[clarfonthey]

It should lint against:

• unsafe {} (currently implemented)
• unsafe impl
• #[unsafe(...)] attributes

Right now this is just done by string patterns, so, unsafe { should be joined by unsafe impl and [unsafe(.

[clarfonthey]

@rustbot claim

(this issue is mostly to remind myself to implement it)