Markdown: Fix HTMLX buffers

Use actual IContentType within ProjectionBuffers.
Warning: Extremely unreliable.

In particular, this breaks ProjectionBufferHelper.GetHtmlBuffer(),
which also assumes that there is only one HTMLX buffer.
This kills the parent buffer's ContainedLanguage support partway
through.

Separately, editing in the embedded buffer is very unreliable.