formatter.ex: Use Phoenix.HTML for mention/hashtag generation

Unlike concatenating strings, this makes sure everything is escaped.
Tests had to be changed because Phoenix.HTML runs attributes through
Enum.sort before generation for whatever reason.
8 jobs for formatter-html-safe in 6 minutes and 3 seconds (queued for 1 second)
Status Job ID Name Coverage
  Build
passed #105645
build

00:02:58

 
  Test
passed #105649
analysis

00:00:55

passed #105648
lint

00:00:22

passed #105646
unit-testing

00:03:05

88.5%
passed #105647
unit-testing-rum

00:02:52

 
  Benchmark
manual #105650
allowed to fail manual
benchmark
 
  Deploy
manual #105651
allowed to fail manual
review_app
manual #105652
allowed to fail manual
stop_review_app