universally escape expressions emitted into C strings

There are no known "dangerous" characters that can currently appear in
expressions, but this future proofs things against extensions to the syntax.
[Note that although "%" can appear in an expression, the strings we emit are
never used as format strings so this should be a non-issue.]