Issue #3606884: Let the message interaction body use restricted rich text

Makes the message field a text_format element pinned to restricted_html (single format, basic editor: bold/italic/links/lists). The submitted value/format pair is flattened back to a plain string in submitConfigurationForm, so storage is unchanged, existing values keep working with no migration, and output stays Xss::filterAdmin-filtered.