Use explicit schema in format calls in DO blocks

[svenklemm]

The DO blocks in the version update scripts did not sufficiently lock down search_path for the format calls allowing injection of a malicious format function to be executed during upgrades.