add src attribute to holder.js-powered <img>s so that they validate

use `data:` URL of empty invalid PNG: src="data:image/png;base64,"