Add missing escaping

Adds a variety of escaping improvements (mostly to translations) to harden the theme against XSS, XSRF, and other badness.
This entire archives file should probably not be included in this patch since we're handling this in core now: https://core.trac.wordpress.org/changeset/30223