Replace unsafe assume calls with `@assert`

[vtjnash]

An @assert is enough to convince LLVM to jump-thread this, without the need for unsafe code or llvmcall.

[KristofferC]

This seems like it could be a non-ideal change because one is not supposed to rely on the side effects of @assert. When we turn off @asserts in default builds this will stop working.