Add missing escaping

Adds a variety of escaping improvements (mostly to translations) to harden the theme against XSS, XSRF, and other badness.
Has the regex on WordPress.com been updated to reflect this? Last I recall there's some regex magic happening in the footer on .com; wondering if this would affect that.