appsec: add SQLi RASP protection

[Hellzy]

What does this PR do?

JIRA: APPSEC-52505

This change adds RASP protection for SQLi. If appsec is enabled, the WAF is run before executing a query, and the query only gets executed if the WAF doesn't yield a security event.

Motivation

This is part of the ASM exploit prevention effort.

Reviewer's Checklist

• Changed code has unit tests for its functionality at or near 100% coverage.
• System-Tests covering this feature have been added and enabled with the va.b.c-dev version tag.
• There is a benchmark for any new code, or changes to existing code.
• If this interacts with the agent in a new way, a system test has been added.
• Add an appropriate team label so this PR gets put in the right place for the release notes.
• Non-trivial go.mod changes, e.g. adding new modules, are reviewed by @DataDog/dd-trace-go-guild.

Unsure? Have a question? Request a review!

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-06-20 13:15:42

Comparing candidate commit be265f7 in PR branch francois.mazeau/sqli with baseline commit 2fb4ed0 in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 44 metrics, 0 unstable metrics.

[Julio-Guerra]

Good job, it overall looks good to me and I left 3 comments.

I would also love if we could add tests for all the different SQL queries (Exec, Update, etc.)

[rarguelloF]

Left a refactor suggestion for the changes in contrib/database/sql.