chore: clean up SQL bindings when deleting styles

[EvanHahn]

Previously, we ran a query that was basically like this:

db.prepare(
  `DELETE FROM my_table WHERE id IN (1, 2, 3)`
).run()

Now, we run the query like this:

db.prepare(
  `DELETE FROM my_table WHERE id IN (?, ?, ?)`
).run([1, 2, 3])

Though I think it was never a problem in practice, this prevents SQL injection attacks if the IDs contained SQL somehow.