fix(sql-editor): FoxScript review fixes (tokens, Out[n], CRLF, Play)

[huyplb]

Summary

Follow-up after Bugbot + Security review of the FoxScript / notebook SQL Editor work (already on main via #124/#125).

Bugbot fixes

• Monaco semantic tokens: 0-based line/column deltas (table/column highlights were shifted)
• Virtual docs: slice parent buffer for cell body (CRLF-safe hover/complete projection)
• Fence markers: allow trailing \r
• Out [n] aligns with In [n] via ranStatementIndices
• SQL cell ▶ disabled (with warning) when no Destination is checked
• SQL completions suppressed inside code fences (reuse projectToVirtualDoc)

Security

• No medium+ findings; Safe mode / password / write-confirm still gate per-cell Play
• No new execution or eval paths; kept reusing parseSetDirectives / existing splitter

Test plan

• vitest 618 passed
• tsc --noEmit for apps/web
• Manual: schema-loaded SQL identifiers tint correctly; Play on SQL without destination shows warning / disabled; run cell 3 alone → Out [3]

  

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_cae12afd-6087-4968-9fb4-9e211e63de96)