[FIX] hr_holidays: proper parameter passing syntax for raw SQL