Promote use of parameterised queries by making interface more low-code

### Description

> ### Best Practice
> The inline codelens support for SQL editor is great and all, but in this implementation, it is not easy to promote the use of parameterized queries for avoiding SQLi. If we devlop the `nr-tables-nodes` to be more _low-code friendly_ (like the MSSQL-PLUS nodes) where the source of a parameter is defined in the UI, we could pre-populate parameters for prompts like "Update the users table and set the expired property to null when the users ID is equal to the incoming payload number"
>

Originally raised in https://github.com/FlowFuse/nr-assistant/issues/66#issuecomment-3200076483

### Epic/Story

_No response_

Start by comparing the nr-tables-nodes SQL editor and inline codelens behavior with the referenced MSSQL-PLUS nodes. Define how a UI-selected parameter source would represent the incoming payload value and verify that the described users-table update can use a parameterized query without inline values.

Written by the indexing model from the issue text.