Switch trusted types sinks to use union type

This replaces usages of HTMLString and ScriptURLString with their equivalent union types.

The relevant algorithms are also updated to do the TT enforcement.