Escape the text in Table's HTML output

The HTML output generated by `Table.pprint` and `Table._repr_html_` was not escaping the values, so it was vulnerable to breaking like this:

```
Table([("</td>", 2, 3)])
```