Reject multiple statements in one query

On Postgres, `frappe.db.sql` ran every `;`-separated statement, which let read-only checks be bypassed. Queries with a `;` outside literals or comments now raise `ProgrammingError`.