cot: convert to use String8

BUG:
Choosing a theme causes a segfault and the recovery loads whatever theme
is default, as specified by COTTheme::chosen_theme in theme.cpp:47