Use ast.literal_eval to parse tuple hyperparameters (#488)

TupleHyperparameter.parse() used eval() to convert string values to tuples. Switch to ast.literal_eval, matching NestedListHyperparameter, so only Python literals are accepted. Add a unit test confirming non-literal input is rejected.