sanitizer: add `sms` in the `SAFE_URL_PATTERN`

The `test` method on regexes does not behave like `match` on strings
for checks if the regex matches when the global modifier (g) is present.

Also adds a unit test on tooltips for sanitizing the same template twice.

Co-authored-by: XhmikosR <xhmikosr@gmail.com>

Pin karma and linkinator due to failures

* Bump version to v4.6.0.

* Dist

This partially reverts commit 6c464938.