[JDBC-V2] Make `DatabaseMetaDataImpl` use `PreparedStatement`.

## Description

There are many places in `DatabaseMetaDataImpl` that construct a dynamic query. It is wrong because leads to a security issue.

- All queries should use `PreparedStatement`
- Where is it no possible - should be reviewed and needed escaping should be added

Start by locating DatabaseMetaDataImpl and inventorying its dynamically constructed queries. Review each query for conversion to PreparedStatement, and identify cases where conversion is not possible and escaping must be addressed. Done means all applicable queries use prepared statements and the remaining cases have the needed escaping.

Written by the indexing model from the issue text.