console/test: serialize DOM nodes as markup in Bun.inspect and matcher utils - #35712

Nit: `n = len_v.to_int32().max(0) as u32` is used unclamped as the `for i in 0..n` bound for both `attributes` and `childNodes` (here and in the `pretty_format.rs` twin) — a duck-typed lookalike with `attributes = { length: 0x7fffffff }` drives ~2^31 `get_index` calls, and the `childNodes` loop writes `\n`+indent *before* the `is_cell` guard so a lying `childNodes.length` also blows up the output buffer. `Vec::with_capacity(n.min(64))` already clamps allocation; consider clamping the iteration b

🟡 Nit: `bun_core::fmt::quote(val)` only escapes `"` — its fast-path predicate `contains_newline_or_non_ascii_or_quote` does not test for `\` (0x5C), so `el.setAttribute("data-path", "C:\\Users")` still emits `data-path="C:\Users"` where pretty-format emits `data-path="C:\\Users"`. The resolved comment on this line asked for both `\` and `"`; commit 408bc378 covered only `"`. Same gap in the `pretty_format.rs` twin. Routing the attribute `JSValue` through the quoted-string printer with `quote_str