loader: set boot_safe when safe mode is selected

This may be used to disable or limit functionality of some services
when safe mode is selected. The particular value of boot_safe should not
be considered significant, only its presence in the environment.

Reviewed by: imp, tsoome
Differential Revision: https://reviews.freebsd.org/D32172