about-handler: properly encode web app info in about:applications

The web app has some partial control over its title, and full control
over its URL. Let's be careful here to ensure the web app info cannot be
used to execute code.

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045>