Support statements with placeholders and bind values

[phrrngtn]

Rather than rely on code-generation for everything, instead emit queries with placeholders and use bind values when executing the query. This will make it easier to use queries that are parameterized by external data.