Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113

Bündel 1 aus dem Duplikat-Audit: existierende zentrale Helper nutzen
statt lokale Duplikate.

Pure Migration ohne neuen Code:
- 1167 _esc()-Aufrufe in 36 Page-Modulen migriert auf UI.escape()
- 24 lokale _esc/_escape-Definitionen entfernt
- lost.js hatte _escape() (Variante) — 17 Aufrufe ebenfalls migriert
- jobs.js + breeder.js: tote Alias-Wrapper entfernt

UI.escape() existierte schon — wurde nur überall lokal nochmal
implementiert. Funktional identisch (gleiche 4-replace-chain für
& < > ").

Tests 19/19 grün. Frontend-LOC um ~120 Zeilen reduziert.

Hinweis: _emptyState (7 Stellen) und _icon (8 Stellen) wurden NICHT
migriert — sie haben abweichende Signaturen von UI.emptyState({...})
bzw. UI.icon(name). Eigener Sprint nötig.

backend/static/js/pages/partner-profil.js

@@ -78,7 +78,7 @@ window.Page_partner_profil = (() => {
                background:var(--c-surface-2);display:flex;align-items:center;justify-content:center;
                overflow:hidden;flex-shrink:0">
             ${p.logo_url
-              ? `<img src="${_esc(p.logo_url)}" style="width:100%;height:100%;object-fit:contain">`
+              ? `<img src="${UI.escape(p.logo_url)}" style="width:100%;height:100%;object-fit:contain">`
               : `<svg class="ph-icon" style="width:32px;height:32px;opacity:.3"><use href="/icons/phosphor.svg#image"></use></svg>`}
           </div>
           <div>
@@ -102,30 +102,30 @@ window.Page_partner_profil = (() => {
             <label class="form-label">Anzeigename *</label>
             <input class="form-control" name="display_name" type="text" maxlength="60" required
                    placeholder="z. B. Hundeblog Musterfrau"
-                   value="${_esc(p.display_name || '')}">
+                   value="${UI.escape(p.display_name || '')}">
           </div>
           <div class="form-group">
             <label class="form-label">Kurzslogan <span style="font-weight:400;color:var(--c-text-muted)">(max. 80 Zeichen)</span></label>
             <input class="form-control" name="tagline" type="text" maxlength="80"
                    placeholder="z. B. Hundetrainerin · 15.000 Follower auf Instagram"
-                   value="${_esc(p.tagline || '')}">
+                   value="${UI.escape(p.tagline || '')}">
           </div>
           <div class="form-group">
             <label class="form-label">Über dich / euer Kanal</label>
             <textarea class="form-control" name="bio" rows="4" maxlength="500"
-                      placeholder="Wer bist du, was machst du, was verbindet dich mit Hunden?">${_esc(p.bio || p.pp_bio || '')}</textarea>
+                      placeholder="Wer bist du, was machst du, was verbindet dich mit Hunden?">${UI.escape(p.bio || p.pp_bio || '')}</textarea>
           </div>
           <div class="form-group">
             <label class="form-label">Website</label>
             <input class="form-control" name="website" type="url"
                    placeholder="https://deine-seite.de"
-                   value="${_esc(p.website || '')}">
+                   value="${UI.escape(p.website || '')}">
           </div>
           <div class="form-group">
             <label class="form-label">Instagram</label>
             <input class="form-control" name="instagram" type="text"
                    placeholder="@deinkanal"
-                   value="${_esc(p.instagram || '')}">
+                   value="${UI.escape(p.instagram || '')}">
           </div>
           <button type="submit" class="btn btn-secondary btn-sm" style="align-self:flex-start">
             Texte speichern
@@ -154,11 +154,11 @@ window.Page_partner_profil = (() => {
             <div style="position:relative;aspect-ratio:1;border-radius:var(--radius-md);overflow:hidden;
                         background:var(--c-surface-2)">
               ${isVid
-                ? `<video src="${_esc(url)}" style="width:100%;height:100%;object-fit:cover" muted playsinline loop
+                ? `<video src="${UI.escape(url)}" style="width:100%;height:100%;object-fit:cover" muted playsinline loop
                           onmouseenter="this.play()" onmouseleave="this.pause()"></video>
                    <div style="position:absolute;bottom:4px;left:4px;background:rgba(0,0,0,.55);
                                 border-radius:4px;padding:1px 5px;font-size:10px;color:#fff">▶ Video</div>`
-                : `<img src="${_esc(url)}" style="width:100%;height:100%;object-fit:cover">`}
+                : `<img src="${UI.escape(url)}" style="width:100%;height:100%;object-fit:cover">`}
               <button class="pp-photo-del" data-idx="${i}"
                       style="position:absolute;top:4px;right:4px;background:rgba(0,0,0,.6);
                              border:none;border-radius:50%;width:24px;height:24px;cursor:pointer;
@@ -197,7 +197,7 @@ window.Page_partner_profil = (() => {
       try {
         const r = await API.upload('/partner/my-profile/logo', fd);
         el.querySelector('#pp-logo-preview').innerHTML =
-          `<img src="${_esc(r.logo_url)}" style="width:100%;height:100%;object-fit:contain">`;
+          `<img src="${UI.escape(r.logo_url)}" style="width:100%;height:100%;object-fit:contain">`;
         _profile = { ..._profile, logo_url: r.logo_url };
         UI.toast.success('Logo gespeichert.');
       } catch (err) { UI.toast.error(err.message); }
@@ -268,10 +268,6 @@ window.Page_partner_profil = (() => {
       </div>`;
   }
 
-  function _esc(s) {
-    return String(s || '').replace(/[&<>"']/g, c =>
-      ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
-  }
 
   return { init, refresh, onDogChange };