[SECURITY-3280] Address XSS by removing some inline JEXL in JS

[daniel-beck]

Address https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3280

Resolves #942

Docs applied: https://www.jenkins.io/doc/developer/security/xss-prevention/#passing-values-to-javascript

I could have cleaned up other fields in a similar manner, but they're not required to resolve the security issue and I'd prefer to not touch the usage stats code.

Testing done

XSS before. No XSS after.

Submitter checklist

Beta Give feedback

1. Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
2. Ensure that the pull request title represents the desired changelog entry
3. Please describe what you did
4. Link to relevant issues in GitHub or Jira
5. Link to relevant pull requests, esp. upstream and downstream changes
6. Ensure you have provided tests - that demonstrates feature works or fixes the issue