Change interface of `primitive-purify' to take an extra argument,

Change interface of `primitive-purify' to take an extra argument,
`safety-margin' (which works like the argument to `garbage-collect'),
and returns an extra value (which is like the value of
`garbage-collect').  These changes will allow purify to be used
instead of gc when desired.