Refactor SQL queries: enforce parameterized bindings and consistent style

[solverat]

Audit and cleanup of all raw SQL queries across the codebase (~114 query sites).

• Replace executeQuery() with executeStatement() for all DML (INSERT/UPDATE/DELETE)
• Eliminate $db->quote() value embedding in favor of ? / :name parameter bindings
• Refactor buildConditionPartsFromDescriptor() to return [$conditions, $params] instead of inlining quoted values
• Replace string concatenation for dynamic table names with sprintf()
• Apply consistent style: single-quoted PHP strings, SQL keywords uppercase, multi-line formatting for long queries, no trailing semicolons

Deprecations

• OpenDxp\Db\Helper::fetchPairs => No replacement
• OpenDxp\Db\Helper::selectAndDeleteWhere => No replacement
• OpenDxp\Db\Helper::quoteInto => Use parameterized queries with ? or :name placeholders instead.