Part of the CHandle/unsafe cleanup: can_undo/can_redo/command_text/ command_is_done and command_init take raw pointers and are now unsafe fn, with call sites wrapped in explicit unsafe blocks.
Part of the CHandle/unsafe cleanup: can_undo/can_redo/command_text/ command_is_done and command_init take raw pointers and are now unsafe fn, with call sites wrapped in explicit unsafe blocks.