Add per-instance safety config with rules, confirm mode, and global safety

Add per-instance safety config with rules, confirm mode, and global safety #1636