Verifiably Safe Exploration for End-to-End Reinforcement Learning