Update sql.md

Adding IN operator, which is in lesson but not on cheatsheet. @mjcollins