Harden HTML report rendering

Escape generated HTML without allocating DOM nodes, including attribute
quotes, and preserve real 0% branch and method coverage values instead
of falling back to 100%.

Precompute sort keys before row reordering, avoid large spread appends,
simplify filter parsing and class updates, harden the dark-mode
preflight, and rebuild the public formatter assets.

Author: sferik