Like expandSql, but string values are single-quoted and escaped; numbers are inserted as is.
String expandSqlAuto(String s) => _expand(s, "sql");