html: enable web process sandbox
See Initiatives#19. This was originally attempted in 9ad31f72 but it was added in the wrong place: we need to enable sandboxing exactly once, not once each time a new HTML previewer is created. This could be done anywhere, but keeping it with the HTMLRenderer class seems simplest, since this is the only place where sushi uses WebKit.