fix: escape params in SQL queries in DuckDB vector store (#17952)

...or-stores-duckdb/llama_index/vector_stores/duckdb/base.py

...or_stores/llama-index-vector-stores-duckdb/pyproject.toml