feat: Wrap sodium_malloc as a custom allocator

This lets us get rid of quite a few unsafe blocks.

sodium/src/lib.rs

@@ -16,5 +16,6 @@ pub fn init() -> anyhow::Result<()> {
 }
 
 pub mod aead;
+pub mod alloc;
 pub mod hash;
 pub mod helpers;