Safe Linear Thompson Sampling