mssql update sql function to use prepared statements

[mtuchi]

Description
For safe sql injections handling using prepared statement is the best option. Update sql function to support prepared statement values sql(query, { values})

Docs

• https://github.com/tediousjs/node-mssql?tab=readme-ov-file#sql-injection