Use `std::env::temp_dir()` for graveyard path

[MilesCranmer]

It is a potential security vulnerability to use /tmp as it may be accessible to multiple users. It is safer and more robust to simply write to whatever the operating system lists as the user's temporary directory. However, this is a breaking change.