Clean up file_list().

Sanitizes all attribute values, and category title.
Uses tag()s for rendering and reduces alternative syntaxes.

git-svn-id: http://textpattern.googlecode.com/svn/development/4.x@5324 2fea6a4d-a838-0410-917b-93a53c48e9d2