fix(Clipboard): prevent security risk HTML in window titles from fetching remote URLs

- Default StyledText to PlainText; keep RichText only on notification content