docs(README): update to no-config
fix(utils/code): encode HTML entities

Previously, the encoding was allowing things like `&#10;` to be passed through
unencoded. This was leading to some issues in display.  The trade off is that
we can no longer specify unusual chars as HTML entities in our code blocks,
but this seems correct to me.