test(spp_audit,spp_change_request_v2): assert escaped entities in XSS tests

Add assertIn("<script>") to two tests that only checked absence
of raw <script> tags, confirming the escaped data is actually present.

Author: gonzalesedwin1123

spp_audit/tests/test_html_escaping.py

@@ -87,3 +87,4 @@ def test_parent_data_html_escapes_script_tags(self):
         )
         html = log.parent_data_html
         self.assertNotIn("<script>", html)
+        self.assertIn("&lt;script&gt;", html)

spp_change_request_v2/tests/test_html_escaping.py

@@ -68,6 +68,7 @@ def test_registrant_summary_escapes_spp_id(self):
             cr.invalidate_recordset()
             html = cr.registrant_summary_html
             self.assertNotIn("<script>", html)
+            self.assertIn("&lt;script&gt;", html)
 
     def test_preview_html_escapes_field_values(self):
         """Verify _generate_preview_html escapes dynamic values."""