feat: execute wildcard exclusion projection

[trakhimenok]

Summary

• compile YAML DTQL wildcard exclusions to real SQL wildcards
• filter driver-discovered columns while preserving database order
• retain missing and duplicate exclusions as non-errors
• support qualified single-source projections and reject unsupported joined forms explicitly
• preserve record identity through a positional hidden helper without hiding same-named source columns

Dependency

• DALgo provider: feat(dtql): support wildcard exclusion projection dalgo#173
• pinned commit: 52a700c3b99a9fac9f0cafad162e36af6e59725c

Verification

• root module: GOWORK=off go test ./...
• end-to-end module: GOWORK=off go test ./...
• independent adversarial review: PASS

WB effort: negative-column-projection

[trakhimenok]

Review by unknown@codex@unknown (head 12b0c9a202ac)
Reviewed-Head: 12b0c9a

Reviewed the exact current patch. Wildcard exclusion planning, visible-column mapping, hidden identity handling, dependency pins, and regression tests are coherent; the Qodana workflow remains opt-in via repository variable. Required build, test, and lint checks are green.