Convert some phutil_escape_html() to hsprintf()

Summary: Found by `sgrep_php -e '"...".phutil_escape_html(...)'`.

Test Plan:
/
/D1
/uiexample/
/countdown/1/
/herald/transcript/1/all/

Reviewers: epriestley

Reviewed By: epriestley

CC: aran, Korvin

Maniphest Tasks: T2432

Differential Revision: https://secure.phabricator.com/D4869

src/applications/repository/controller/PhabricatorRepositoryArcanistProjectDeleteController.php

@@ -28,10 +28,10 @@ final class PhabricatorRepositoryArcanistProjectDeleteController
     $dialog
       ->setUser($request->getUser())
       ->setTitle('Really delete this arcanist project?')
-      ->appendChild(
-        '<p>Really delete the "'.phutil_escape_html($arc_project->getName()).
-        '" arcanist project? '.
-        'This operation can not be undone.</p>')
+      ->appendChild(hsprintf(
+        '<p>Really delete the "%s" arcanist project? '.
+          'This operation can not be undone.</p>',
+        $arc_project->getName()))
       ->setSubmitURI('/repository/project/delete/'.$this->id.'/')
       ->addSubmitButton('Delete Arcanist Project')
       ->addCancelButton('/repository/');

src/applications/repository/controller/PhabricatorRepositoryDeleteController.php

@@ -24,8 +24,7 @@ final class PhabricatorRepositoryDeleteController
 
     $dialog = new AphrontDialogView();
     $text_1 = pht('If you really want to delete the repository, you must run:');
-    $command = 'bin/repository delete '.
-               phutil_escape_html($repository->getCallsign());
+    $command = 'bin/repository delete '.$repository->getCallsign();
     $text_2 = pht('Repositories touch many objects and as such deletes are '.
                   'prohibitively expensive to run from the web UI.');
     $body = phutil_tag(