Adds a bit more sanitization to the PR announcer

Shouldn't be parsing any HTML tags inside the PR name.