Always HTML escape labels retrieved from our API (#81)

The labels often contain a specialization in pointy brackets
(like `Westfalen <Südost>`) which need to be preserved in HTML.