Journalists face surveillance via Pegasus, Candiru spyware even in ‘safe spaces’: UN rights chief