Wrap inlinecolour filter in $sce.trustAsHtml

This is required because bo-html is unsafe whereas ng-bind-html requires
"safe" HTML (ng-bind-html-unsafe is deprecated since 1.2)
Remove bindonce for Angular 1.3 One-Time Bindings