Marked and DOMPurify should be loaded from extra WebJARs

At the moment, Marked and DOMPurify are included in the source of the application which means that we don't upgrade them. Instead, they should be directly loaded from external WebJAR dependencies that we can also upgrade easily.