refactor(settings-window.ts): dom xss vulnerability due to unescaped html in template literal (#2023)

User-controlled data from `localStorage` (`key` and `panel.name`) is interpolated directly into an HTML string and assigned via `innerHTML` without sanitization. This creates a DOM-based Cross-Site Scripting (XSS) vulnerability. The `escapeHtml` utility is explicitly imported at the top of the file but mistakenly left unused.

Affected files: settings-window.ts

Co-authored-by: Elie Habib <elie.habib@gmail.com>