Safer embeds with an oEmbed allowlist

Rich text embeds now use Jumpstart's own oEmbed lookups instead of a third-party gem, and only providers on an allowlist can be embedded. Embedded scripts are also run through a custom sanitizer, which keeps arbitrary scripts out of your users' content.