vmui: render unsafe markdown links as text in logs view

[func25]

Only explicit http:// and https:// links are rendered as clickable links. Other markdown links and images are rendered as plain text.

Follow up aadc99b

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}

[Loori-R]

Updated the markdown link rendering changes:

• moved link-related helpers into a separate markedLinks utility
• kept only explicit inline http/https markdown links clickable
• rendered reference-style links and reference definitions as plain text
• rejected URL control characters, including C1 controls
• added tests for XSS in link text, reference-style links, preserved definitions, and control-character URLs