send_button_html (and related methods) do not properly escape DAObject intrinsic names that have a `'`, like dictionary keys

[nonprofittechy]

Issue: when you try to invoke send_button_html on an ALDocumentBundle that is in a dictionary, the on-screen rendering fails. Example: the object is named: template_request.requestee_bundles['4167e36be7f04794ad30770e865afe68']

Best resolution is likely to move away from a JavaScript string with hardcoded values, and instead use a data attribute and a click handler. We already can do this in the aldocument.js file we load