fix: assert safe dynamic sql history queries

[l50]

Key Changes:

• Wrapped dynamically assembled SQL queries with sqlx safety assertions to satisfy runtime query APIs
• Preserved parameter binding for all user-controlled values so query construction remains injection-safe
• Documented why dynamic hash search SQL is safe to assert despite being assembled from conditional static fragments

Changed:

• History CLI query execution now passes constructed cost, list, credential search, and hash search SQL through sqlx::AssertSqlSafe while continuing to bind filters and limits separately - ares-cli history commands
• Persistent credential hash searches now assert dynamically generated SQL as safe and clarify that only static fragments and placeholder indices are interpolated, with all values still supplied through bind parameters - ares-core persistent store queries