WHERE expressions: wire into update/delete/show data + SQL gen (ADR-0026 steps 3-4)

Wires the stratified WHERE-expression fragment into the three
filter commands and compiles the resulting Expr to SQL.

Grammar (data.rs): the `update` / `delete` `where` clause is
now the expression fragment (`Subgrammar(&expr::OR_EXPR)`) in
place of the single `col = val` slot; `show data` gains an
optional `where <expr>` and an optional `limit <n>` (a
non-negative integer, validated at parse time). The
expression's right-hand operands are a schema-aware
`DynamicSubgrammar` so the hint panel still narrows to the
left column's type (ADR-0026 §8) — but the inner grammar is
permissive: a type-mismatched literal still parses (§7).

AST: `RowFilter::Where{column,value}` -> `RowFilter::Where(Expr)`;
`ShowData` gains `filter: Option<Expr>` and `limit: Option<u64>`.
A `RowFilter::eq` convenience constructor keeps simple-equality
call sites and tests readable.

SQL (db.rs): `compile_expr` lowers an `Expr` to a
parameterised WHERE — every literal a `?` placeholder,
identifiers `quote_ident`-quoted, `<>` for inequality. A
literal compared against a column binds through that column's
type where compatible and falls back to its syntactic shape on
a mismatch (§7 — permissive). `show data ... limit n` emits
`LIMIT ?` with an implicit primary-key `ORDER BY`, so it is a
stable "first n by primary key".

completion.rs: `invalid_ident_at_cursor` no longer mis-flags a
digit-led literal (`1`) as an unknown column now that the
WHERE operand slot also accepts a column reference; a
`ProseOnly` slot suppresses keyword candidates even when the
expected set also carries a column ident.

11 db integration tests cover AND / OR / NOT, BETWEEN, IN,
LIKE, filtered `show data`, and limit ordering; walker and
expr unit tests cover the parse surface. Type-mismatch /
`= NULL` diagnostic flagging (§7 highlight + hint) is the
remaining ADR-0026 piece.

tests/friendly_enrichment.rs

@@ -181,19 +181,13 @@ fn enrich_unique_update_resolves_value_from_assignments() {
         let cmd = Command::Update {
             table: "Customers".to_string(),
             assignments: vec![("id".to_string(), Value::Number("1".to_string()))],
-            filter: RowFilter::Where {
-                column: "name".to_string(),
-                value: Value::Text("Bob".to_string()),
-            },
+            filter: RowFilter::eq("name", Value::Text("Bob".to_string())),
         };
         let err = db
             .update(
                 "Customers".to_string(),
                 vec![("id".to_string(), Value::Number("1".to_string()))],
-                RowFilter::Where {
-                    column: "name".to_string(),
-                    value: Value::Text("Bob".to_string()),
-                },
+                RowFilter::eq("name", Value::Text("Bob".to_string())),
                 None,
             )
             .await
@@ -464,18 +458,12 @@ fn enrich_fk_delete_resolves_child_table() {
         // Delete the parent that has children — engine refuses.
         let cmd = Command::Delete {
             table: "Customers".to_string(),
-            filter: RowFilter::Where {
-                column: "id".to_string(),
-                value: Value::Number("1".to_string()),
-            },
+            filter: RowFilter::eq("id", Value::Number("1".to_string())),
         };
         let err = db
             .delete(
                 "Customers".to_string(),
-                RowFilter::Where {
-                    column: "id".to_string(),
-                    value: Value::Number("1".to_string()),
-                },
+                RowFilter::eq("id", Value::Number("1".to_string())),
                 None,
             )
             .await