Add eslint rule to ban using dompurify directly

All callers in our codebase should use `domSanitize` instead

Also adding myself as a codeowner here to make sure I'm alerted to changes in domSanitize since they need more consideration