Disable WordPress.Security.EscapeOutput.ExceptionNotEscaped

[rebeccahum]

This ruleset is disabled by several teams already, so we should just disable it due to its controversy as we've discussed internally.

For example, this triggers it:

throw new InvalidArgumentException( __( 'Bad request.', 'two-factor-provider-webauthn' ) );