tests: add `xmlesc` to escape XML in generated XML reports.