Description

Allow parameterized queries when using read_sql to construct a Dataset.

Use case

Currently, the query string passed to read_sql must be fully formed and not contain any parameter bindings. This limits its applicability both in dev (need to use raw python string formatting for parameters, opportunities for mistakes) and in prod (SQL injection). It should be possible to use a parameterized query string and pass a dict/list of parameters alongside the query.