Fix DB rotate password syntax error (#191)

[octoaide]

Closes #191
Closes #210 (added by @sehkone)

Summary

This patch fixes a SQL syntax error that occurred when running bootroot rotate db to change the database user's password. PostgreSQL does not allow parameterized queries for DDL statements like ALTER ROLE ... WITH PASSWORD and CREATE ROLE ... WITH PASSWORD; the password must be supplied as a string literal.

What I changed

• Add quote_literal function to escape and quote SQL string literals (single quotes are doubled and the value is wrapped in single quotes).
• Update provision_db_sync in src/db.rs to use quote_literal(db_password) for ALTER ROLE ... WITH PASSWORD and CREATE ROLE ... WITH PASSWORD instead of a parameterized $1 placeholder.
• Add unit tests for quote_literal (and existing quote_ident) to cover escaping and complex passwords.
• Update CHANGELOG.md to document the fix.

Why this fixes the issue

Parameterized parameters ($1) are not supported in PostgreSQL for these DDL statements, which caused the syntax error seen in #191. By injecting a properly escaped string literal, the statements are valid SQL while preventing SQL injection via proper escaping of single quotes.

Files changed (high level)

• src/db.rs: added quote_literal, updated password DDL usage, added tests
• CHANGELOG.md: documented the change

Notes

• The quote_literal implementation escapes single quotes by doubling them, following PostgreSQL conventions.
• Unit and integration tests were run locally; all tests pass.

References

• Original issue: DB ALTER ROLE PASSWORD Syntax Error #191

Fixes the root cause and ensures DB password rotation no longer produces a syntax error.