SQL tool invoke filters "attach" in the text of the value being inserted

### Describe the bug

```

✗ Store identify review results (sql)
│ INSERT INTO trace_reviews (trace, function_name, file, status, finding) VALUES
└ Blocked SQL statement: "attach" is not allowed for security reasons.

```
I saw the above error in the trace of my agent using sql to track the status of a code review.

The model said this:
```
● The word "attach" in data triggers the filter. Let me split the inserts:
```

Looks like there needs to be some better filtering of commands versus values when evaluating the safety of sql statements. Maybe ask sqlite-ast-parser to parse the statement first and then evaluate the different parts of the statement? Or use `sqlite3_set_authorizer` to inspect commands as they execute.

### Affected version

GitHub Copilot CLI 1.0.10

### Steps to reproduce the behavior

I asked for a trace-by-trace code review of a codebase via claude opus 4.6. It chose to use a sqlite database to track status of review. the codebase contains the word attach in its functions.

### Expected behavior

_No response_

### Additional context

_No response_

首先重现 issue 中的 INSERT 示例，并找到 CLI 使用的 SQL 安全过滤器。比较它如何处理插入值中的单词 "attach" 与 ATTACH 命令；完成后应保留对不安全命令的阻止，同时不拒绝这个有效的 INSERT。

由索引模型根据 Issue 内容生成。