Avoid call_user_func_array in query method

I don't think the parameters for executeQuery allow the bound values to be a string. The old deprecated `execute` method apparently used to, but now there's something to automatically convert it if it's not an array. If we want to accept a string here it  needs to be handled appropriately or we need to use the deprecated `execute` function.

See: https://github.com/concrete5/concrete5-5.7.0/blob/master/web/concrete/src/Database/Connection/Connection.php#L63-L67