Add tests, schema sync safeguards, and query/handler improvements

- Add bun test suite: SQL generator and value unit tests, plus MariaDB
  integration tests gated on BUN_MARIADB_TEST_DB
- schema: add --dry-run and require confirmation (or --yes) before
  dropping tables/columns; block unapproved destructive statements
- Always AND targetId with the query, regardless of searchOperator
- Initialize lazily on first call; init throws instead of exiting
- Generate IN (?, ?, ...) lists for IN / NOT IN
- Share value binding between insert and update (booleans, embeddings,
  function values, "" -> NULL for non-text columns)
- Keep Buffers and convert BigInt/Date without a JSON round-trip
- DbSQL: report success for empty SELECT results
- Run update() in a transaction with row locking
- Key the client cache on the full connection config
- Consolidate identifier quoting, drop dead code, merge column lookup
- Read CLI version from package.json, pin @types/bun, chmod CLI on compile
- Rebuild dist

Co-Authored-By: Claude Opus 5.5 <[email protected]>

dist/utils/export-archive.js

@@ -165,10 +165,11 @@ function findFileContents(dir, predicate) {
         const current = stack.pop();
         for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
             const full = path.join(current, entry.name);
+            // Never follow symlinks from an extracted (untrusted) archive
             if (entry.isDirectory()) {
                 stack.push(full);
             }
-            else if (predicate(entry.name)) {
+            else if (entry.isFile() && predicate(entry.name)) {
                 return fs.readFileSync(full, "utf-8");
             }
         }
@@ -184,7 +185,7 @@ function findSchemaFile(dir) {
             if (entry.isDirectory()) {
                 stack.push(full);
             }
-            else if (isSchemaFileName(entry.name)) {
+            else if (entry.isFile() && isSchemaFileName(entry.name)) {
                 return {
                     content: fs.readFileSync(full, "utf-8"),
                     fileName: entry.name === AppData.DbSchemaFileName