Improve SQL parameter binding and escaping

[kvch]

Description

This PR addresses multiple SQL issues in pgstream.

• parameters are binded where possible
• source.postgresql.replication.replication_slot is escaped correctly
• IsQuotedIdentifier not only checks if the quotes but validates the whole token

Type of Change

Please select the relevant option(s):

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
• 📚 Documentation update
• 🔧 Refactoring (no functional changes)
• ⚡ Performance improvement
• 🧪 Test coverage improvement
• 🔨 Build/CI changes
• 🧹 Code cleanup

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing performed
• All existing tests pass

Checklist

• Code follows project style guidelines
• Self-review completed
• Code is well-commented
• Documentation updated where necessary

[xata-bot]

Backport failed for v0.9.x, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin v0.9.x
git worktree add -d .worktree/backport-965-to-v0.9.x origin/v0.9.x
cd .worktree/backport-965-to-v0.9.x
git switch --create backport-965-to-v0.9.x
git cherry-pick -x 96da911d02464df77d6994ea18233bc20ca04bcb

[github-actions]

Merging this branch will not change overall coverage

Impacted Packages	Coverage Δ	🤖
github.com/xataio/pgstream/internal/postgres	29.79% (ø)
github.com/xataio/pgstream/pkg/snapshot/generator/postgres/schema/pgdumprestore	89.30% (ø)
github.com/xataio/pgstream/pkg/snapshot/store/postgres	85.71% (ø)
github.com/xataio/pgstream/pkg/stream	40.23% (ø)
github.com/xataio/pgstream/pkg/wal/replication/postgres	65.07% (ø)

---

Coverage by file

Changed files (no unit tests)

Changed File	Coverage Δ	Total	Covered	Missed	🤖
github.com/xataio/pgstream/internal/postgres/pg_utils.go	49.61% (ø)	129	64	65
github.com/xataio/pgstream/pkg/snapshot/generator/postgres/schema/pgdumprestore/snapshot_pg_dump_restore_generator.go	84.65% (ø)	404	342	62
github.com/xataio/pgstream/pkg/snapshot/store/postgres/pg_snapshot_store.go	85.71% (ø)	56	48	8
github.com/xataio/pgstream/pkg/stream/stream_init.go	5.97% (ø)	134	8	126
github.com/xataio/pgstream/pkg/wal/replication/postgres/pg_replication_handler.go	64.29% (ø)	140	90	50

Please note that the "Total", "Covered", and "Missed" counts above refer to code statements instead of lines of code. The value in brackets refers to the test coverage of that file in the old version of the code.

Changed unit test files

• github.com/xataio/pgstream/internal/postgres/pg_utils_test.go
• github.com/xataio/pgstream/pkg/snapshot/store/postgres/pg_snapshot_store_test.go