A type-safe SQL for Rust