Harden Marshal/JSON safety and deserialization hooks

[evolve75]

Safer Marshal loading hooks and documented JSON/Marshal caveats.

[evolve75]

next already includes the Marshal hook hardening in 254db7b .
There is also follow-up safety documentation in 449ca81 ; keeping the issue open for tracking.