Avoid Unicode errors due to bad filenames

We get surrogate-escoded filenames from os.listdir(), interpolate them
into some unicode HTML, then get a boom during conversion to UTF-8.

Partially fixes https://github.com/mgedmin/restview/issues/17: you still
end up with a 404 link.