[Gendarme] New Security rule: SqlCommandShouldUseNamedParameters

This rule will report failures on source code prone to SQL injection
attacks.

It includes basic tests that cover SqlCommand usage via
constructor and CommandText property.

Contributed under the MIT/X11 licence.