New artifact-hosting validation: refuses <base href> pointing outside the artifact

Artifact publishing now refuses pages whose <base href> points outside the artifact, such as at another site or the site root, since artifact hosting only serves the artifact's own folder. Depending on whether additional files can still be added to the artifact, the model is told to remove the tag and either publish referenced files alongside the page or inline what the page needs.