fix(skill-creator): escape eval viewer attributes

[ebbsanchez]

Fixes #1394.

Summary

• make the eval viewer escaping helper encode quotes in addition to &, <, and >
• route benchmark metadata and config labels through the escaping helper before assigning generated markup via innerHTML
• apply the same escaping helper update to the trigger eval review asset

Verification

• git diff --check
• local string harness with the issue payload x" onmouseover="alert(document.domain) confirmed the tooltip source keeps the quote as ", so it does not terminate the title attribute