Hardening custom Elementor widgets for production

Escape everything, enqueue assets only when the widget renders, prefer Group_Control over ad-hoc CSS, and keep widget CSS on design tokens from the theme.