fix: 4 bugs from regression testing

- BUG-1: Strip HTML tags in sanitizeName (prevent stored XSS)
- BUG-2: Strip HTML tags in notes via sanitizeText across all 3 booking APIs
- BUG-3: Dashboard excludes archived/past MCs and expired Open Day events from counts
- BUG-4: Truncate long names in booking cards to prevent overflow

src/app/admin/bookings/GenericBookingsList.tsx

@@ -86,7 +86,7 @@ export function GenericBookingsList<T extends BaseBooking>({
       <BookingCard key={item.id} status={item.status}>
         <div className="flex items-start justify-between gap-3">
           <div className="flex items-center gap-2 flex-wrap text-sm min-w-0">
-            <span className="font-medium text-white">{item.name}</span>
+            <span className="font-medium text-white truncate max-w-[200px]">{item.name}</span>
             <ContactLinks phone={item.phone} instagram={item.instagram} telegram={item.telegram} />
             {renderExtra?.(item)}
           </div>