[BUGFIX] Allow HTML node onclick events in generated frontend markup

`ContentObjectRenderer` and `AbstractMenuContentObject` are still relying
HTML event attribute `onclick` to open new client window instances,
which were (correctly) removed by HTML sanitizer.

In order to keep the functionality, exceptional declarations have been
added, and `vHWin=window.open(...)` substituted by `openPic(...)`.

Resolves: #94866
Releases: master, 11.3, 10.4, 9.5
Change-Id: I961746b3776d12f302933ebb775ab215bdcd85ab
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/70551


Tested-by: Benni Mack <benni@typo3.org>
Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>