prevent xss in modules' "Move To..." dialog, fixes CNVS-17662

ensure we properly escape module and item names when presenting them as
options in the dialog

also ensure translations are escaped, and rename some variables to
appease the linter

test plan: infer from the above, or see ticket for more info

Change-Id: I8cc16bb9828db8653843b5bbd35dc49bac6d0c00
Reviewed-on: https://gerrit.instructure.com/46294
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jeremy Stanley <jeremy@instructure.com>
QA-Review: Caleb Guanzon <cguanzon@instructure.com>
Product-Review: Jon Jensen <jon@instructure.com>