active-link.js should use CSS.escape

See patch (attached) for 10.1.x

Fixed failures in #2.

Should contain test coverage.

I think this is a duplicate of 🐛 active-link.js throws JS error if query string parameter contains a single quote Needs work

Per that issue, it seems that the actual problem is the ' (single quote) in the queryString variable that causes this line of JavaScript (prior to what the patch here changes) to produce what will be an invalid selector:

      const querySelector = path.currentQuery
        ? `[data-drupal-link-query='${queryString}']`
        : ':not([data-drupal-link-query])';

In that issue, the solution is to escape the single quote. That fixes this issue as well. The use of CSS.escape in the patch of this issue, prevents the errors from being thrown, but I don't think it actually fixes the problem. The resulting selector still won't be valid-- it will just be escaped. I think the solution in that issue is the way to go.

Hmm it's not just `queryString`, any query parameter could contain a single quote (`'`).

Since active-link pipes content through `querySelector()` that it does not control, I think it's safer to just `CSS.escape()` it all? There could be single quotes (and other characters!) in the query params that would cause active-link to fail?