docs: xml deviations

Raises three deviations from the plugin for sign-off: code is
formatted only in <style> and <script>, a hex character reference
is one token, and ignore mode trims only XML whitespace.