Unsafe SQL for commands with table names list input

[qfritz]

Table names when creating publications or checking replica identity are user provided and directly interpolated within SQL, could lead to arbitrary code execution.

This is minor as this tool is aimed to people already with higher roles on the database, but still should be fixed.