*: using EscapeSQL to enhance SQL formatting in dumping & lightning

[s3nt3]

What problem does this PR solve?

Issue Number: close #33950

Problem Summary:

Due to the lack of support for escape functions in the golang standard library (database/sql: missing escape functions #18478), formatting functions have to be used in dumplings and lightning to splicing fields such as schema, table name, column name, etc., which will bring security risks.

What is changed and how it works?

The TiDB kernel implements some utility functions to handle internal SQL calls in secure. We can use the tool function EscapeSQL implemented by the TiDB kernel to escape fields such as schema, table name or column name, to eliminate the hidden dangers of current SQL formatting.

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)
• No code

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has not been approved.

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[sre-bot]

Code Coverage Details: https://codecov.io/github/pingcap/tidb/commit/2cca99b40498ec083c154ba0ca907dc106cf0f8b