Use esc_url() in a few places

Not a security issue, but it will escape the site’s admin URL if needed.
L10n Validator: update config and cache to match latest changes
Fix an @since version number

This change was backported after the initial commit.