Build rich text media replacements safely

Use Nokogiri attributes and text nodes so stored media and task values cannot be reparsed as markup.