tracker: escape search strings

Use Tracker functions to perform the escape, because it is designed to
hand-craft later a SPARQL query with the escaped string.

https://bugzilla.gnome.org/show_bug.cgi?id=730399