Move sanitization tests into their own file.

This should make it easier to understand how sanitize is tested, and also easier to run tests in isolation (go test -run Sanitize).
Also adds an explicit test for [link](...) syntax to be sanitized.