Use parameter binding for the metadata search query

The MetadataSchemaQueryWriter should return not just Sql but a Collection of parameters to be bound to the query. This is beneficial for both security and performance.

Locate MetadataSchemaQueryWriter and inspect how its Sql result is consumed; start with the metadata search query-writing path and any existing tests. Done means the writer exposes both SQL and a Collection of parameters, with the query consumers binding those parameters; verify the relevant Java tests.

Written by the indexing model from the issue text.