fix: Task 1 review round 1 - escaped )$ in reference settings, allow map, routing rulings

I-1: reject )$ in every decoded string setting and in the re-serialized
JSON. S21: string settings cleaned and re-serialized. S22: injectable
dynamic-content allow map (name => setting => field type), loop_* only via
the map. S23: unknown content.innerContent is rich text. S24: keys below
scalar kinds are unknown, ...Url path segments are URLs. S25: isVariable
removed. M-1: real \u escapes in tests, malicious suite as editor, fixture
html() raw for unfiltered_html. M-2: S7 gate at any depth plus
css.advanced.customCss.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

tests/Unit/Integrations/Divi/Compose/ComposeFixture.php

@@ -30,9 +30,10 @@ final class ComposeFixture
                 return trim(strip_tags($value));
             }
 
+            /** Like WpValueSanitizer (ruling S4): raw for users with unfiltered_html. */
             public function html(string $value): string
             {
-                return (string) preg_replace('#<script\b[^>]*>.*?</script>#is', '', $value);
+                return $this->unfiltered ? $value : (string) preg_replace('#<script\b[^>]*>.*?</script>#is', '', $value);
             }
 
             public function code(string $value): string