fix: sanitize even more xml-unfriendly chars

[jennifer-richards]

Adds the remaining Unicode ranges forbidden by XML 1.0 to the lists replaced before being rendered as XML via Tastypie. These are the surrogate ranges and explicitly non-character code points. Replaces these with the \ufffd � character when rendering.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.74%. Comparing base (88cb3bf) to head (9e035bb).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #11681   +/-   ##
=======================================
  Coverage   88.73%   88.74%           
=======================================
  Files         337      337           
  Lines       45313    45340   +27     
=======================================
+ Hits        40209    40236   +27     
  Misses       5104     5104           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.