Cursor::step() is not safe

[apoelstra]

In https://www.sqlite.org/c3ref/column_blob.html it is explained that pointers allocated by the sqlite_column_* are invalidated by calls to sqlite3_step(). Since this memory is owned by the Cursor, step() must take a mutable reference.