Use sanitization from HTML Pipeline in tests

This gives implementers a clearer picture of the markup that makes it through.

/cc @github/user-content