String safety (#1548)

* Array size UB fixes

* Fix ShieldD

* Remove (almost) all unsafe strcpy calls

Bunch of macros. C arrays are easy enough and just need a different call. For various cases where a char* is passed around bare, I've made a TEXT_SPAN macro that can store a length too for bounds checking.

* Move crash handling in safe string operations to separate TU

* strcat safe version

* sprintf made safe too

* Fix compile

src/f_op/f_op_msg_mng.cpp

@@ -226,7 +226,7 @@ fpc_ProcID fopMsgM_messageSetDemo(u32 i_msgidx) {
     return 0;
 }
 
-char* fopMsgM_messageGet(char* i_stringBuf, u32 i_msgId) {
+TEXT_SPAN fopMsgM_messageGet(TEXT_SPAN i_stringBuf, u32 i_msgId) {
     dMeter2Info_getString(i_msgId, i_stringBuf, NULL);
     return i_stringBuf;
 }