Feature: use PostgreSQL format function to sanitize identifiers and literals

### Feature description

Identifiers and literals are not fully sanitized or escaped. This can lead to a connector error.

Use PostgreSQL format or quote_ident function sanitize these. It allows for a full query or an individual string.
https://www.postgresql.org/docs/current/functions-string.html#FUNCTIONS-STRING-FORMAT

Start by locating the connector's query construction and the code paths that interpolate identifiers and literals. Read the linked PostgreSQL string-function documentation, then verify that all relevant values are sanitized using the appropriate PostgreSQL formatting or quoting behavior and that connector errors no longer occur.

Written by the indexing model from the issue text.