Bug 1469999 - Use yaml.safe_load() in taskgraph; r=dustin

yaml.load() can evaluate arbitrary Python code via syntax such as
!!python/object/apply:os.system. Seriously.

Let's switch taskgraph to yaml.safe_load(), which is reasonable
about limiting magic.

Differential Revision: https://phabricator.services.mozilla.com/D1736