Manual free-text sanitisation

https://www.pivotaltracker.com/n/projects/887836/stories/74137504

This PR add validation that free-text fields in manuals don't contain dangerous HTML tags.
We use this list for "official" sanitisation: https://github.com/alphagov/govspeak/blob/master/lib/govspeak/html_sanitizer.rb