fix: replace isomorphic-dompurify with sanitize-html to remove jsdom dependency

isomorphic-dompurify depends on jsdom 29 which uses top-level await
via @asamuzakjp/css-color, breaking require() on Node 24.
sanitize-html uses htmlparser2 instead and has no jsdom dependency.

Author: unhappychoice