[sql] Add option to sanitize db.query.text

[alanwest]

Component

OpenTelemetry.Instrumentation.SqlClient

What is the expected behavior?

The collection of db.query.text is opt-in because it runs the risk of collecting sensitive information. Collecting db.query.text is often very valuable to end users. However, the only choices being a) not collecting it or b) risk exposing sensitive information is inadequate.

The instrumentation needs to offer a way to sanitize db.query.text allowing users to collect it without the risk of exposing sensitive information.

Sanitizing db.query.text is a costly operation. What this issue does not attempt to address is whether sanitization and collection of db.query.text should be on by default. For now, it should be implemented as opt-in, though later we should decide whether it should be on by default.