sql: properly check bind variable names

After this patch, variable names will have to follow the rules defined
for identifiers in SQL. Essentially, this means that a digit can no
longer be used as the first character of a bind variable name.

Part of #4763

NO_DOC=Will be added later.
NO_CHANGELOG=Will be added later.

(cherry picked from commit 899fbaeb)