Remove all panics and dubious arithmetic

[ranweiler]

The initial implementation is totally reckless wrt panics, casting of numeric types, and floating point arithmetic. Fix this up.

[ranweiler]

This is now largely addressed. We should still improve the API around possible misuse of Bencher::run() (e.g. calling it outside of a benchmark function).