[chrisknvidia]

Fixes #888.

OH1 mistakes percent markers in literal SQL with separately bound parameters for string interpolation. Recognize bounded source-level binding through canonical sqlite3, psycopg and psycopg2 APIs, exempting only the lexical match owned by the exact call.

Check passive setup once and memoize immutable connection argument validation. Preserve whole-tree mutation/alias checks, the AST-node/depth limits and shared source-position handling. Actual interpolation, nested unsafe queries, unknown helpers, opaque/function contexts and malformed/transformed input retain findings. Runtime driver identity is not verified; scoring and exit policy are unchanged.

Validation on 8400b6c:

• 1,424 existing affected tests, project lint/format and targeted mypy pass. One existing resource regression now checks many safe queries plus an unsafe trailing query; no test cases or files were added.
• 22 installed-console invocations and four real MCP stdio scans cover JSON/SARIF agreement, strict gates, baselines, recursive outcomes and expected malformed-input partial results. All 114 Python modules match source, wheel and installation. Real SQLite binding preserves SQL-looking row data and the table.
• Repeated architecture/code/manual security review and complete-finding comparisons pass.

Five hosted checks pass; hosted unit CI is still running. No live PostgreSQL, model-provider or customer production run is claimed.